Protection of your personal data is a top priority for us at MEKMA!

Please take some time to read this Privacy Policy and to get informed of the ways in which the company under the name “MEKMA S.A. Fitness Equipment and Sports Gear”, located at 21, Grigoriou Lambraki Str., Lykovrysi, Attica, tel. 210 2758228, e-mail address mekma@mekma.gr (hereinafter the “Company” or “we” or “us”), operating as “Data Protection Officer”, collects, stores, uses and generally processes your personal data or general anonymous data, when you visit the website mekma.gr (hereinafter “site”), for purposes of analysis, improvement of your experience, advertising and online security.

In addition, this Privacy Policy explains the ways in which your personal data are used, communicated and protected, the options available to you with regard to your personal data as well as how you can contact us. For any questions concerning this Privacy Policy and for any issue related to the processing of your data and to the exercise of your rights feel free to contact our Data Protection Officer (DPO) at 21, Grigoriou Lambraki Str., Lykovrysi, 14123 or at the e-mail address mekma@mekma.gr.

We note that your personal data are collected ONLY if you use/fill in the online contact form on our website. All other data are collected anonymously.

1. A few words about the Company's website

The Company's website, where products are displayed electronically, is www.mekma.gr. If you wish to make transactions you may visit our specially designed place at 21, Grigoriou Lambraki Str., Lykovrysi, call us at 210 2758228 or e-mail us at mekma@mekma.gr. We will be happy to serve you!

For any request for information or change regarding your personal data you may contact the Company's DPO.

What are personal data?

The term “personal data” refers to information on natural persons, such as surname and first name, postal address, e-mail address, contact number, etc., which indicate or may indicate your identity, hereinafter “personal data or data".

2. What is personal data processing?

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Is it obligatory to provide your data?

Providing your data to the Company may be obligatory, so as to achieve the objectives specified in this Privacy Policy, or may be optional.

Whether providing personal data is obligatory or optional is indicated with an asterisk (*) next to obligatory personal data.

If you refuse to provide the data indicated as obligatory on the website, it will not be possible to achieve the main purpose of collection of the specific data which may, inter alia, make it impossible for the Company to contact you.

Providing to the Company additional data, other than those indicated as obligatory, is optional and does not have any consequences regarding the main purposes of data collection but it serves to optimize quality of the services provided.

4. Which of your data do we collect?

We ensure that we collect only those of your personal data which are strictly necessary and which clearly suit their intended purpose. These data include the following:

• Data provided when filling in/ using the online contact form
     -Obligatory: e-mail address
     -Obligatory: first name, surname, postal address, contact number so that we are able to contact you.
  
  
• Moreover, for the purpose of offering the best website (hereinafter “site”) experience, we collect the following anonymous data: technical information on your internet connection and browser, the country and telephone code where your computer is located, the webpages you have browsed during your visit, the advertisements you have clicked on and any search terms you have entered. For more information, please read our Cookies Policy.
  
  
• Your image may be recorded on CCTV when you visit our showroom.

5. How do we use your data?

We wish to offer you the best possible browsing experience. To achieve this, we must obtain a picture of you (always anonymously) by combining the data that we have collected. We then use your data to make you offers of products and services that are likely to interest you.

We are permitted to undertake the above-mentioned actions under the law on personal data protection in the context of our legitimate interest and of the need to understand our customers with a view to offering them the highest possible service level.

Finally, your data are processed either by the Company's specially authorized personnel or, via computer systems and electronic devices, by the Company and, exceptionally, by third persons who, after having made a contractual commitment to treat confidentially and to protect your data, carry out work that is necessary for achievement of the purposes which are strictly related to the use of our website, to its services and to the sale of products through our website.

• Contact: The Company uses your data to respond to requests/questions that you submit and to any complaints. The information you share with us enables us to handle your requests and to provide you with the best possible response. We may also keep a record of your questions/requests to us so that we respond better in any future communications. We do this in accordance with our contractual obligations to you, with our legal obligations as well as with our legitimate interests, in order to serve you in the best possible way and to be able to improve our services on the basis of your personal experience.
  
  
• We may sometimes need to share your data with a third person who provides a service (such as a courier or a technician visiting your place).  We would not be able to meet your request, if you did not share your personal data with us.
  

For the communication of information regarding our products, services and events

• Dispatch of newsletter/offers: With your consent, we will use your personal data, preferences and transaction data in order to inform you, via e-mail, the internet, the telephone and/or the social media, about relevant products and services including individualized/personalized offers, discounts, etc. Of course, you can withdraw this consent at any time.
  
  
• Push Notifications: Depending on your browsing history, you can receive, after you have given your consent, notifications of our offers and news. Of course, you can withdraw this consent at any time.
  

For the function improvement and maintenance of our business, products and services

We are developing with a view to ensuring what is best for you. We are working intensively to improve the system services relating to the products that we provide to you. We do this in accordance with our legitimate business interests.

We wish to make you offers and proposals that are more relevant to your interests. To help us create a better and broader picture of you, we combine your personal data or anonymous data that have been collected during our entire relationship. This will help us adapt your experience and decide which inspiration or which content you will share with us and with your customers.

• We will use the data we keep on your favourite products in order to show you the most interesting content on our website or apps. This is achieved with your consent to receive apps notifications or, as regards the website, your consent for the installation of cookies on your device. For example, we may show you a list of products you have recently browsed or make recommendations to you on the basis of your purchase history and of any other data you have shared with us.
  
  
• To send you requests for research and assessment which will enable us to improve our services. These messages will not include advertising content and will not require prior consent when sent by e-mail or by text message (SMS). We have a legitimate interest to do so since it helps make our products and services more relevant to you. Of course, you are free to refuse to receive these requests from us at any time by updating your internet account preferences.
  

For the protection of our Company's or of third persons' rights, property or security

• Protection of your account from fraud and other illegal activities: This includes use of your data to maintain, update and protect your account. Moreover, we monitor your browsing activity in order to identify and speedily solve any problems and to protect the integrity of our website. We undertake all the above actions in the context of our legitimate interest.

• Operation of CCTV Systems: For the purpose of security, our store operates a CCTV System which records images in order to protect our customers, spaces, property and collaborators from crime. We do this in accordance with our legitimate business interests. If we detect any criminal activity or alleged criminal activity through the use of CCTV for the monitoring of fraud and of suspicious transactions, we will process these data in order to prevent or detect unlawful acts. Our goal is to protect our customers, employees and collaborators from criminal activities.

For compliance with our obligations governed by law

• To comply with our contractual or legal obligations we must exchange data if so required by law, for example, following a decision on the exchange of data with judicial services.
  
  
• To send you communications which are required by law or which are necessary in order for us to inform you of the changes in the services we offer you, such as updates on privacy notifications, product recall notifications and legally required information concerning your orders. These service messages will not include advertising content and will not require prior consent when sent by e-mail or by text message (SMS). If we do not use your data for these purposes, we cannot comply with our legal obligations.

Who are the recipients of your data – How are your data communicated?

Only the Company's absolutely necessary personnel, which has been committed to confidentiality, the companies cooperating with us or third service providers, which process your data as processors on our behalf and according to our instructions, have access to your data.

Communication by you

• When you use certain social media data on our website or apps, you can create a public profile containing information such as username, profile picture and city.  You can also share content with your friends or with the broad public, including information about your interaction with the Company.  We encourage you to use the tools we provide to you in order to handle the sharing of content in the Company's social media for the purpose of controlling the information that you make available via the Company's social media data.

In light of the above, the policy we apply to those with whom we share your data is the following:

• We provide only the anonymous information that is necessary for the performance of their specific services.
• They may use your anonymous data only for the precise purposes laid down in our contract with them.
• We cooperate closely with them to ensure that your privacy is respected and protected at any time.
• If we stop using their services, any data they possess will either be erased or be rendered anonymous again.

How do we ensure that processors respect your data?

Those acting as processors on our behalf have agreed and contractually committed with the Company:

• to observe confidentiality,
• not to send data to third persons without the Company's permission,
• to take appropriate security measures,
• to comply with the legal framework for personal data protection and in particular with Regulation (EU) 2016/979 (otherwise GDPR).

International transfer of anonymous data

The personal data that we collect (or process) from our website or apps will be stored in Greece. However, some of the data recipients with whom the Company shares your personal data may be located in countries other than the one where your personal data were initially collected. Legislation in these countries may not provide the same level of data protection as compared to the country which initially provided your personal data. However, when we transfer your personal data to recipients in other countries, including the USA, we commit to protect your personal data as described in this Privacy Policy and in accordance with the applicable legislation.

We take measures to comply with the applicable legal requirements on the transfer of personal data to recipients in countries, either outside the European Economic Area (EEA) or in Switzerland, which do not ensure an adequate level of protection. We use various measures to make sure that your personal data which are transferred to those countries are adequately protected in line with the data protection rules. These measures include signature of contractual clauses and certification that the recipient has adopted the European binding rules or complies with the Privacy Shield between the EU and the USA and between Switzerland and the USA.

How long do we retain your data?

We retain your personal data for as long as is necessary to achieve the objectives laid down in this Privacy Policy (unless a longer period of retention is required under the applicable law). Overall, this means that we will retain your personal data for as long as you keep an account with our Company. As regards your personal data which are related to the purchase of products, we retain these data for a longer period in order to meet our legal obligations (such as for purposes of compliance with the tax and commercial legislation and of provision of guarantee). At the end of this retention period, your data will be erased fully or anonymously, for example through being aggregated with other data, to enable their use in a non-identifiable manner for purposes of statistical analysis and business planning.

Some examples of periods of retention of customer data:

• Guarantees
  If your order included a guarantee, the relevant personal data will be retained until the end of the period of guarantee.
• Newsletter
  Your declaration of consent for the dispatch of a newsletter is retained for as long as the Company sends you the newsletter and, in any case, for no more than six months from the time when its dispatch ends.

What are your rights?

You have the right of access to your personal data.

This means that you have the right to be notified by us if we process your data. If we process your data, you may request to be informed of the purpose of the processing, the type of your data that we keep, who we give them to, how long we store them, whether automated decision-making takes place, as well as of your other rights, such as correction or erasure of data, restriction of processing and lodging of a complaint to the Hellenic Data Protection Authority.

You have the right to correct inaccurate personal data.

If you find that there is an error in your data, you may submit to us an application so that we correct it (e.g. correction of name or update on change of address).

You have the righ to erasure/"right to be forgotten".

You may request from us to erase your data if they are no longer necessary for the above-mentioned purposes of processing or if you wish to withdraw your consent in case this is the only legal basis.

You have the right to portability of your data.

You may request from us that you receive in legible form the data you have provided or that we transmit them to another data protection officer.

You have the right to restriction of processing.

You may request from us to restrict processing of your data for as long as examination of the objections concerning processing is pending.

You have the right to object or to withdraw your consent to the processing of your data.

You have the right to object to the processing of your data and we will cease it, provided that there are no other compelling legitimate grounds which take precedence over your right. If you have declared your consent for the collection, processing and use of your personal data, you may withdraw your consent prospectively at any time.

Which is the law applicable to the processing of your data by us?

The applicable law is Greek law, as formulated in accordance with GDPR [Regulation (EU) 2016/979], with Regulation (EU) 2016/679 and, in general with the existing Greek and European legislative and regulatory framework on personal data protection. Any disputes arising with regard to your data shall be brought before the courts of Athens.

Where can you appeal if we breach the applicable law on the protection of your personal data?

You have the right to lodge a complaint to the Hellenic Data Protection Authority (postal address: 1-3, Kifissias Ave.,  115 23, Athens, tel. 210. 6475600, e-mail address contact@dpa.gr) if you consider that the processing of your personal data breaches the existing Greek legislative and regulatory framework on personal data protection.

How will you be notified of any amendments to this Policy?

We update this Privacy Policy whenever necessary. If there are significant changes in the Privacy Policy or in the ways in which we use your personal data, we will publish the update of the existing one on our website before the changes become applicable and we will notify you by any appropriate means.

We encourage you to read this Policy regularly in order to be aware of the ways in which your data are protected. This Privacy Policy was last updated on 23 May 2018.

Questions and comments:

We trust that this Privacy Policy has helped you understand the ways in which we handle your personal data as well as your rights to control the handling by our Company.

If you have any unanswered questions or comments and concerns about our Privacy Policy please contact our Data Protection Officer who will be happy to assist you:

• e-mail address: mekma@mekma.gr