Personal Data
- Headquarters and Scope of Business Activities
The company METRO is headquartered in the Municipality of Metamorfosi, Attica, at 1 Sorou Street, and is engaged in the trade of food products and household goods, operating a supermarket chain across Greece.
- Lawful Processing of Personal Data
METRO, in compliance with the provisions of the European General Data Protection Regulation (EU 2016/679) and relevant Greek legislation (Law 2472/1997, as amended), manages the Personal Data disclosed to it with the utmost care, ensuring their protection and privacy in every instance. To safeguard the confidentiality and security of Personal Data, METRO has implemented all necessary organizational and technical measures, establishing internal security policies, utilizing suitable electronic means, and properly informing and training its staff.
METRO processes Personal Data lawfully, collecting and processing it solely for specified, explicit, and legitimate purposes, only to the extent necessary to achieve those purposes. METRO ensures that the data it maintains is accurate and kept up to date, seeking the assistance of data subjects (i.e., the individuals to whom the data pertains) for this purpose and retaining the data only for as long as necessary to achieve the specified purposes.
- Personal Data Subject to Processing
METRO collects and processes Personal Data, meaning information related to an identified or identifiable natural person, whether identification can be achieved directly or indirectly. The term "processing" encompasses any operation performed on such data, whether automated or not.
Personal Data includes, for example, information such as a name, residential address, email address, or telephone number. Additionally, during a visit to METRO’s website, further data is collected automatically for technical reasons, such as:
- IP address (Internet Protocol address) of the accessing computer
- Website from which the visit originates (referral)
- METRO web pages visited
- Date and time of visit
- Browser type and browser settings
- Operating system
- Username
These technical details may, in certain cases, constitute Personal Data. Generally, we use technical data only to the extent necessary for technical purposes, such as to operate and protect our website and application from attacks and misuse, and for statistical purposes, either in pseudonymized or anonymized form.
For specific processing purposes, such as providing information on products, services, promotions, offers, events, and contests via email, newsletters, SMS, phone, and other electronic means, as well as for research and statistical purposes, METRO collects and processes the following information:
- Full name
- Contact information (residential address, postal code, contact telephone number, email address)
- Additional details (Tax Identification Number)
- Transactional behavior
- Use of Personal Data
METRO collects, processes, and uses your Personal Data mainly when you visit its websites, register on them, log in to an existing customer account, or order products through the website. Processing of Personal Data is conducted in accordance with applicable law and this privacy policy or, if applicable, in accordance with the consent you provide. In certain cases, data is used only in pseudonymized or anonymized form.
4.1 Registration, Login, and Ordering
METRO, strictly adhering to the principles governing the protection of personal data as provided by relevant laws and international conventions, commits to not using your data unlawfully or without your prior approval. Neither www.mymarket.gr nor METRO discloses, publicizes, sells, or exchanges personal data and information you trust with us, except in cases where disclosure is required by public authorities, courts, etc., in compliance with the lawful procedure. All information related to your personal data and transactions is kept safe and confidential. Your identity is verified through two credentials: the Login ID (username/email) and a Personal Security Password, which provide secure access to your personal data each time they are entered. For added security, it is recommended that you periodically change your password. You are also encouraged to treat all information provided through this service as confidential and to refrain from disclosing it to third parties. Responsibility for the confidentiality and secrecy of your personal data lies solely with you. In case of any loss or leakage of your credentials, METRO should be notified immediately, otherwise neither METRO nor the online store www.mymarket.gr is liable for any unauthorized use of the password. Furthermore, it is advised to avoid using easily guessable passwords, such as birth dates. Should you forget your password, there is an option on the login page to retrieve a new password. By selecting “Retrieve New Password,” you will receive a verification key via the email used at registration, enabling you to choose a new password.
The provision of certain personal data is a necessary requirement for the initiation of any transaction with www.mymarket.gr. During the ordering process, we may ask for your full name, delivery address, contact phone number, and email address to enable the services you require. You may at any time change the personal data provided, restrict, or cancel their use.
4.2 Additional Information
METRO stores and uses your Personal Data when you contact it via phone, email, or through its contact form, or when you send us information in any other way, thereby transmitting your data to us for this purpose. Furthermore, we store and use personal and technical data to prevent and address any misuse or other illegal behavior on our website, e.g., to maintain data security in the event of attacks on our IT systems. Finally, we retain and use your data as required by law, such as in response to an official directive or a court or other authority decision, as well as to secure our rights and claims and defend the company in court.
- Third Parties to Whom Personal Data May Be Transferred
METRO may transfer this data to affiliated companies within the European Union, which will process the data on METRO’s behalf as data processors solely for the purposes mentioned in section 3. In transferring data, METRO takes all necessary measures to ensure the highest level of security. METRO guarantees that these companies provide necessary safeguards for the protection of Personal Data and implement appropriate technical and organizational measures to ensure the lawfulness of the processing and the protection of Personal Data and the rights of the data subjects involved. METRO states that it has previously signed contracts with these companies, which include terms regarding the adoption of security measures and METRO’s supervision of these measures.
- Data Security
The security of your Personal Data is of high priority for METRO. Consequently, we protect your data, stored with us, through technical and organizational measures to prevent loss or misuse by third parties effectively. Specifically, our employees processing Personal Data are bound to confidentiality. For the protection of your Personal Data, they are transmitted in encrypted form. To ensure the long-term protection of your data, technical security measures are regularly monitored and adjusted, if necessary, to align with prevailing technological standards.
- Consent and Data Subject Rights
By indicating your agreement with the processing of your Personal Data, you consent to its processing for the specified purposes, whether by METRO or an affiliated company. You have the right to withdraw your consent at any time, as well as to exercise your legal rights. These rights include accessing your data and obtaining a copy of it, rectifying any inaccurate information, erasing your data or restricting its processing, data portability in a structured, commonly used, and machine-readable format, and transferring it to another controller, objecting to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you. METRO processes your requests with due care to ensure the security of your data and the protection of your rights. For this reason, should there be any doubt regarding the identity of the requesting party, additional information may be requested to verify your identity.
In cases where METRO cannot immediately fulfill your request due to a high volume of similar requests, you will be informed at the earliest opportunity, and in any event within one month of your request submission, of its status and any reasons for a potential delay. If your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, METRO reserves the right either to charge a reasonable fee based on administrative costs for providing the information or to decline to act on the request. In the event of a data breach that may pose a high risk to your rights and freedoms, and if such breach does not fall within any exemptions expressly provided by law, METRO is obligated to notify you without undue delay.
You may contact METRO at any time at the following email address: privacy@metro.com.gr to exercise your rights, submit an inquiry, or file a complaint, and to request deletion of your personal data. Additionally, if you believe that your data rights have been violated, you have the right to file a complaint with the competent Data Protection Authority.
- Links to Other Company Websites
METRO’s website may contain links to other companies' websites. METRO assumes no responsibility for the data protection measures on external websites accessible through these links. Please refer to the data protection policies of those external sites. Depending on the registration method chosen (e.g., Facebook Login, Google Login, Gravatar), we may display your public profile photo when you log in to your Account if you have opted to make it public. We remind you that your account is strictly personal, and access to it is obtained only through your personal password.
- Cookies
Cookies are text files sent to your browser and stored on your computer while you are on our website. Cookies do not contain personal information, nor do they allow any third party to contact you via phone, email, etc. Additionally, cookies do not provide access to any files or documents on your computer. The use of cookies helps the website remember information about your visit, gathering useful data on your search preferences, thereby improving your search experience for your next visit. Cookies also assist METRO in tracking the website’s performance and traffic, enhancing its presentation and content according to visitors' preferences. Some or all of the following cookies may be stored in your browser. You can view and manage cookies through your browser settings (however, mobile browser settings may not provide this visibility). Among the different types of cookies, METRO uses the following:
- Strictly Necessary Cookies: Essential for the proper functioning of the website, allowing you to navigate and use its features. These cookies do not identify you personally. Without these cookies, our website cannot function effectively. Additionally, these cookies allow the website to remember your preferences, such as font size, or if you have responded to a survey, to provide enhanced and personalized features.
- Performance Cookies (Google Analytics): These cookies gather information on how you use the website, such as which pages you visit most often. These cookies collect aggregate, anonymous information that does not identify any visitor. They are used solely to improve the website’s performance.
Disabling Cookies
You may enable, disable, or delete cookies entirely through your browser’s settings. If you choose to disable cookies, some parts of the website may not function properly.
- Modifications to This Privacy Policy
METRO seeks to present attractive product offers to its customers and to adapt its product range to customers' preferences. Any future relevant adjustments will be addressed in this notice. In any event, METRO reserves the right to amend the terms of its Personal Data Protection Policy in accordance with the applicable legal framework at any given time. Therefore, these terms of Personal Data Protection may be revised and updated at any time without notice. Website users are encouraged to check these terms periodically for any changes, as continued use of the website implies acceptance of all possible modifications.