1. IDENTITY AND CONTACT INFORMATION

1.1. The data controller responsible for the processing of your personal data is the company under the corporate name "OLYMPIC COMMERCIAL & TOURIST ENTERPRISES SINGLE-MEMBER SOCIETE ANONYME", with registered seat at Chalandri, Attica, Vas. Georgiou Street no. 50A, tel. 2106879800 and 8015005555, email address contact@avis.gr ("Company").

1.2. When processing your personal data for the advertising of our products and/or services on social media, our Company acts as a joint controller with the provider of the respective social media. For the relevant processing, in addition to these terms, the terms of our data processing policy also apply.

1.3. For any request regarding your personal data you can contact our Company at the following email : gdpr@avis.gr.

 

 

2. DATA SOURCES & CATEGORIES

 

2.1. On the basis of your consent we process the following categories of your personal data from the following sources:

 

 

Categories	Indicative Data	Sources of Data
Identification data	Gender, residential address, age, date of birth,	Data Subject
Contact details	Mobile and landline, e- mail, social media account, home, work or delivery address, preferred communication channel.	Data Subject Social Networking Media
Transaction data	Products/services under procurement, electronic declarations of intent, payment method, transaction details (products, date, time, store), delivery details (date and method)	Data Subject
Loyalty Program Data	Number of points, points redemption data, gift or gift certificate delivery data , contest and market research data	Data Subject
Transactional Behavior data	Consumer preferences (brand, category), preferred store, product / service ratings	Data Subject
Usage data​ via network	Our website usage data, online account information, referring website, device (desktop, tablet, smartphone ), device operating system, internet usage data, third party website usage data	Data Subject Social Networking Media Service Providers​ of Targeted Online Advertising​​
Social media data	Data from your interaction with our corporate accounts on Facebook, Twitter, YouTube , etc., social media usage data	Social Networking Media Service Providers​ of Targeted Online Advertising​

 

2.2. You are free to consent or not to the collection and processing of your personal data, since such processing does not constitute a legal or contractual obligation or requirement for the conclusion of a contract, whereas not providing it does not have any consequences for you.

 

3. PURPOSES OF PROCESSING

 

3.1. Provided you give us your consent, we process your personal data for the following purposes:

3.1.1. Commercial communications by electronic media and targeted online advertising for the purpose of advertising and marketing our products and services, including running contests / events, providing rewards programs and conducting customer satisfaction surveys.

3.1.2. Creation of a consumer profile for the purpose of sending targeted advertisements that best meet your needs and preferences as well as evaluation and improvement of our products / services (research and/or analysis to better understand your needs, research and evaluation to improve existing products or / and services and development of new ones, evaluation for the creation of new programs, offers, etc).

3.2. Your consumer preferences’ profile is determined by data analysis, which combines your demographic data with your consumer preferences. Based on your profile, we send you commercial communications with content that best meets your needs and preferences.

 

4. LEGAL BASIS

4.1. The processing of your data is based on your consent according to Article 6 § 1 (a) of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR").

4.2. Your consent is provided either in writing by signing these terms or electronically by affirmative action through a special online form, which is accompanied by these terms and in which you are invited to grant your consent.

 

 

5. RETENTION PERIOD

We will keep your data until you revoke your consent, which can take place at any time by sending an email to our Company.

 

6. DATA RECIPIENTS AND DATA TRANSFERS

6.1. The Company transfers your personal data to the following categories of recipients: (a) to marketing service providers working with us to advertise our products and services, (b) to ICT service providers, (c) to data analysis service providers, (d) to social media providers in the context of targeted or offline advertising, and, finally, (e) to the Avis group of companies for purposes related to the organizing and managing of advertising and promoting products / services at group level.

6.2. The Company transfers your personal data to third parties performing processing on our behalf in the context of the above processing purposes (e.g. marketing companies, technical support and system maintenance, data hosting, etc.).

6.3.The Company generally does not transfer your personal data outside the European Economic Area ("EEA"). In the event of a transfer outside the EEA, we will ensure that such transfer outside the EEA is lawful and has the appropriate safeguards in accordance with articles 44 et seq. of the GDPR, such as the execution of standard contractual clauses approved by the European Commission with the recipients of the data outside the EEA, as well as any additional protection measures. In this case, you have the right to receive relevant information as well as a copy of the documents related to these guarantees.

 

7. RIGHTS AND OBLIGATIONS

7.1. By consenting, you certify that you are over sixteen (16) years of age. If you are under sixteen (16) years of age, you must submit your consent through your parent or guardian. Otherwise, you must refrain from submitting your personal data to us, and your parent or guardian bears the sole responsibility for the legal consequences of the foregoing incorrect submission.

7.2. With regard to the processing of your personal data, you have the rights of access, rectification, deletion, restriction of processing, portability, objection in general and in relation to automated decision-making.

7.3. You also have the right to withdraw your consent at any time by sending a relevant electronic communication to our Company. The withdrawal of your consent does not affect the lawfulness of any processing before its withdrawal.

7.4. Finally, if you consider that the exercise of your right has not been lawfully treated by our Company, you have the right to appeal before the Personal Data Protection Authority, for matters under its jurisdiction (Kifisias Avenue 1-3, P.O. 115 23, Athens, Telephone: 210 6475600, E- mail : contact@dpa.gr , complaint submission: https://www.dpa.gr/el/polites/katagelia_stin_arxi ).