Privacy Statement

At Village Roadshow Operations HELLAS S.A., we value and prioritize the respect and protection of your personal data. Our Privacy Statement outlines the personal information that Village Roadshow Operations HELLAS S.A., VAT GR094504693, and headquarters at 40.2 km Attiki Odos - MSS 1 MESOGEION collects about you, how we use and safeguard it, and the choices you have regarding its use. We acknowledge that safeguarding personal data is an ongoing responsibility, and as such, this statement will be updated periodically. Please visit our website to stay informed of any changes. It's important to note that we do not collect data on minors under 18 years of age.

 Data Controller – Data Protection Officer (DPO)

We follow national and European regulations 2016/679 to protect your personal data. This means that as a data controller, we process your information while complying with the General Data Protection Regulation (hereinafter referred to as the "Regulation") as in force. If you have any questions about how we handle your personal data, please contact our Data Protection Officer (DPO) via email at dpo@village.com.gr or by fax at (+30) 210 2704888.

 What is the purpose of processing, and how do we use your personal data?

We use your data for various purposes, including facilitating purchases of goods from our physical or online stores. To this end, we require certain personal information from you, such as

• your name, surname, and payment card details to identify the recipient of the purchase.
• mobile phone number, and
• email address so that you receive updates regarding your purchase.

All the above information is necessary for the prevention and detection of fraud against you as well as against the Company. After your consent and as long as you have notified, either when creating a member account on this website, or when purchasing goods in a physical or online store of the Company, or when registering for our newsletter and personalized communication, the necessary your personal information, the following possibilities are also provided:

Subscription to newsletters and the sending of updates and offers:

To subscribe to the Company's newsletter and receive informational updates and/or offers and/or promotions, you will need to provide us with your email address, name and your name on our websites. By subscribing to newsletters and personalized updates, you give us your express consent to send you all updates and/or offers and/or promotions via e-mail and text messages or instant messages through the relevant services (e.g. SMS, Viber, Push Notifications, etc.).

 

Create a member account:

To create a member account on our website, you'll need to provide your email address, name, surname, and mobile phone number and set your own personal passwords. By registering on our website, you explicitly consent to receive updates, offers, and promotions via email and text message.

Create a member account using social media:

To create a member account using social media, you must first give your consent to the respective social media platform. We will receive your email address from the platform, as well as any additional information you have declared as public. By creating a member account, you give us permission to use your stored information for future orders, saving you the hassle of having to re-enter your details. This account will also grant you access to your order history, pending orders, preferences, and settings on the "My Account" page. You can modify or supplement your information as necessary and will not need to fill in your details again for future orders.

Personalized communication ("profiling")

We may use the personal data we collect to personalize your browsing experience and send you updates, provided you have given your consent.

Website Use

When you visit our website, we may gather information about your usage and interactions, including information collected through cookies.

Participation in competitions

For your participation in contests, sweepstakes or general corporate activities/programs through any social media we collect personal data such as name, surname, e-mail, your viewing files (video, photo, etc.) which we process for the need of organization, evaluation, publicity and conduct of the activity/programme. Participation in the Competition constitutes for each participant the free, unreserved and clear declaration, approval and consent to the processing of the above data and the keeping of a relevant record for the aforementioned purposes.

Request servicing

In order to communicate effectively and maintain a positive relationship, we may request your contact information when you reach out to us through our website contact form, phone, or Facebook. For example, we may contact you by telephone or e-mail or by other means in order to inform you or request additional information about a request of yours. This information will be used for administrative purposes, such as scheduling a recruitment appointment.

Curriculum Vitae details

In case you submit a CV or job application, we will collect and process your personal data submitted by you and we will process indicative personal data: educational background, employment history, areas of expertise, and reference information, professional and other work licenses and certifications you hold, educational institutions you graduated from, your job type preferences, verification of information with your references and previous employers, any other information you choose to submit through the CV submission process, other data that may be provided during our telephone communication or through your application or other communications with you for the purpose of conducting interviews and filling vacancies.

Credit/Debit Card Details

To complete your order, you may need to provide your credit/debit card information if you choose the appropriate payment method. This information will only be used for electronic transmission through a secure banking environment to complete your payment. The Company does not store any credit/debit card data in its electronic systems or physical files. In some cases, your card details may need to be transferred to a third-party provider working with the bank to complete the payment process. Please note that the cardholder's verification may require this transfer.

What are the legal grounds for processing your personal data?

The personal data you provide with your explicit consent to the Company may be processed by us only when there is a legitimate reason.

Legitimate grounds for processing your personal data are:

• When you purchase goods from our physical or online stores, we execute the sale and fulfill our contractual obligations by delivering your purchases, providing after-sales support, and communicating with you about your purchases. We may also use your information to comply with legal or regulatory requirements, resolve disputes, prevent fraud and abuse, and other reasonably necessary purposes.
• We prioritize the protection of your and our legitimate interests, and to achieve this, we employ closed-circuit television (CCTV) and security cameras in our physical stores to enhance the safety of our customers and facilities. We also utilize specialized security software to detect and prevent any malicious actions. In our online store, we collect specific information like your IP address, location, and device data to identify and prevent any fraudulent or abusive activity on our website.
• Compliance with various legal obligations, including tax regulations and e-commerce laws.
• The Company may request your consent to subscribe to newsletters, receive updates on products, offers, and promotions, participate in customer satisfaction surveys, and receive personalized updates based on applicable legal requirements. 

Are minors and children allowed to use our online store?

Our online store does not sell goods to individuals under the age of 18. If you are under 18, you can only make purchases on our website with the permission and supervision of a parent or guardian.

Where we transfer the data

To provide you with better services, the Company may share your personal data with third-party service providers who help us sell tickets and maintain this website. This includes technology service providers who ensure the security of our electronic systems. We do this to fulfill our processing purposes and ensure smooth operations.

The Company is responsible for processing your personal data in all of the scenarios mentioned above. They define the specific elements of the processing and sign a contract with third-party processors to ensure that they follow the legal framework. This guarantees that individuals can freely and easily exercise their rights under the law.

Storage of your personal data

The Company undertakes to keep with absolute confidentiality the record of personal data you have declared to us when registering on our website or our physical stores, as well as your transaction history in our online store and only for the purposes of processing those mentioned above.

The duration for data storage is determined based on specific criteria, which varies on a case-by-case basis.:

• When processing is required as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as required by the relevant provisions.
• When processing personal data on a contractual basis, we store it for the necessary duration to perform the contract and/or support legal claims under the contract.
• Your personal data is kept for promotional and advertising activities until you withdraw your consent. You have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the legality of processing based on your consent before it was withdrawn.
• We will keep the data from your website account as long as you don't request its deletion. However, we may store some of your information even after deleting your account if it's necessary for legal compliance, dispute resolution, fraud prevention, or enforcement of website terms and conditions.
• The information you provide on your CV or application form will be kept for three (3) months and will be used for future recruitment purposes.

To withdraw your consent, please contact the Company's Data Protection Officer (DPO) at the following contact details: email: dpo@village.com.gr, fax (+30) 210 2704888. After the end of the storage period of your personal data, the data is destroyed and/or deleted in a way that does not allow their restoration or reconstruction.

What are your rights in relation to your personal data?

All individuals whose data is processed by the Company have the right to the following:

Right of access:

You have the right to access and verify your personal data, including storage, processing, and protection methods.

Right to rectification:

You have the right to study, correct, update or modify your personal data  Right to erasure:

You have the right to submit a written to have your personal data deleted from your Company's file at any time if we have processed it after your prior consent.

. However, if there is a contract, legal obligation, or public interest involved, there may be specific restrictions, or the right may not exist.

Right to restriction of processing:

You have the right to request restriction of processing of your personal data in the following cases: (a) when you dispute the accuracy of your personal data and until they are verified, (b) when you do not wish to delete your personal data and request instead of deletion the restriction of their use, (c) when your personal data are not used for processing purposes,  However, they are necessary for the establishment, exercise and support of legal claims, and (d) when you object to processing and until it is verified that there are legitimate reasons that concern us and prevail over the reasons for which you object to processing.

Right to object to processing:

You are entitled to object to the processing of your personal information at any time, including when it is necessary for our legitimate interests as controllers. You also have the right to object to processing for direct marketing and consumer profiling purposes.

Right to data portability:

You have the right to receive a free copy of your "customer card" that contains your personal information in electronic or printed form. This will enable you to access, verify and process your data using commonly used methods. If technically possible, you can also request that your data be directly transmitted to another controller. This right applies to data that you have provided to us and that is processed automatically with your prior consent or in accordance with a relevant contract.

Right to withdraw consent:

Finally, the Company informs you that in cases where the processing of your personal data takes place after your prior consent, you have the right to revoke it freely, without affecting the legality of processing based on your consent before you revoke it. To exercise any of the above rights, you can contact the Data Protection Officer (DPO) in writing at the following contact details: email: dpo@village.com.gr, fax (+30) 210 2704888.

Right to complain to the DPA

You have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr): Call Center: (+30) 210 6475600, Fax: (+30) 210 6475628, E-mail: contact@dpa.gr

Personal Data Security

At our company, we prioritize the safety of your personal data. We have implemented appropriate technical and organizational measures to prevent accidental loss or destruction and unauthorized access, use, modification, or disclosure of your data. Our security technology is regularly updated and tested, and only employees who require access to your data for providing services or benefits to you are granted permission. We also provide our employees with training on the importance of confidentiality and safeguarding your personal data. However, due to the nature of the internet and its accessibility, we cannot guarantee that unauthorized third parties will never be able to violate our security measures and use your personal data for unauthorized or unlawful purposes.

Information on the processing of personal data through a video surveillance system

Data controller:

Village Roadshow Operations HELLAS S.A., VAT 094504693 and headquarters 40.2 km Attiki Odos - MSS 1 MESOGEION, tel. 210-2704800

Purpose of processing and legal basis:

We use a surveillance system for the purpose of protecting people and goods. The processing is necessary for the purposes of legitimate interests pursued by us as controller (Article 6 para. 1. f GDPR).

Analysis of legitimate interests

Our main concern is to safeguard our premises and the items within from any unlawful activities like theft. This also includes protecting the well-being, physical safety, health, and property of our employees and any other individuals who are authorized to be in the monitored area. Our image data collection is limited to specific locations where there is a higher probability of criminal activities, such as at the entry points and cash registers. We do not monitor areas that may infringe on the privacy and personal data rights of the individuals whose images are captured.

 

Recipients

Only competent and authorized personnel responsible for site security can access the stored material. It is strictly prohibited to share this material with any third party, except in the following circumstances: (a) when it contains information relevant to the investigation of a criminal offense against the controller's property or individuals, which must be conveyed to the appropriate judicial, prosecuting, and police authorities; (b) when lawful requests for data are made by competent judicial, prosecuting, and police authorities in the course of their duties, and (c) when data that may serve as evidence of a criminal offense is shared with the victim or offender..

Retention period

Our policy is to store data for 14 days, after which it is automatically deleted. If an incident occurs within that timeframe, we may keep a portion of the video for up to one additional month in order to investigate and protect our legal interests. If the incident involves a third party, the video may be kept for up to three additional months.

Rights of data subjects

Data subjects have the following rights:

• Right of access: you have the right to know if we are processing your image and, if so, to receive a copy of it.
• Right to restriction: you have the right to ask us to restrict processing, such as not to delete data that you consider necessary for the establishment, exercise, or support of legal claims.
• Right to object: you have the right to object to the processing.
• Right to erasure: you have the right to request that we delete your data.

If you wish to exercise your rights, you can send an email to dpo@village.com.gr, send a letter to our postal address, or submit your request to us in person at the store. To process a request related to your image, please inform us of the approximate time when you were within camera range and provide us with an image of yourself so we can locate your data and protect the data of others who may appear in the images. Alternatively, you can visit our facilities where we can show you the images in which you appear. Please note that exercising your right to object or delete data does not guarantee immediate deletion or modification of processing. We will respond in detail as soon as possible within the deadlines set by the GDPR.

 

Right to file a complaint

If you consider that the processing of your data violates Regulation (EU) 2016/679, you have the right to file a complaint with a supervisory authority.

The competent supervisory authority for Greece is the Data Protection Authority, Kifisias 1-3, 115 23, Athens, https://www.dpa.gr/, tel. +30 2106475600.

Version Information – Changes and Updates

Our Privacy Statement was last updated on July 27th, 2020. We may make changes to this Statement at any time without notifying you, except by posting the updated version on our website. While we may send periodic emails to remind you of changes, it is important that you check our website regularly to stay informed about our current Privacy Statement.