Privacy Policy
Last updated on 22/03/2024
Welcome to HB BODY
HB BODY takes the privacy of its customers seriously into account. For this reason we strictly comply with the following Privacy Policy, which ensures the high quality of our electronic commerce services and is in full alignment with applicable data protection laws
By visiting our Website you accept our Privacy Policy set out below and commit that you will use our Website according to its terms and conditions. If you do not wish to be bound by the following Privacy Policy, you may not access our Website and use our services.
HB BODY Data
The services of https://hbbody.com/ are provided by the enterprise under the distinctive title Company (“ HB BODY ” or “Company”). Our Company data are as follows:
CORPORATE NAME : HB BODY S.A.
DISTINCTIVE TITLE : HB BODY
ADDRESS : Sindos Industrial Area 57022 Thessaloniki
TAX NO : EL094258176
TAX AUTHORITY : F.A.E. Thessalonikis
For any further request or query you may communicate with us a +30 2310 790000
Subject Matter
The present policy sets out the terms and conditions which are followed by our Company to protect the privacy of the users of https://hbbody.com/. This policy describes the conditions under which we make any collection and processing of your personal data and ensure their confidentiality (“Privacy Policy”).
HB BODY reserves the right to amend and update this Privacy Policy, whenever it deems it necessary, and any changes thereof shall come in force and effect from the instance they appear online at the present webpage of https://hbbody.com/.
In the event that the use of any service of the Website is governed by specific terms of use, such terms shall apply in conjunction with the present Terms. In case of conflict, the specific terms of use for each service shall prevail.
If any provision of the Privacy Policy is declared void or unenforceable, such provision shall be severed from this Privacy Policy, which shall otherwise remain in full force and effect but only to the extent that the original intent of this Privacy Policy will not be altered in any material respect.
Definitions
For the purposes of the present Privacy Policy the following definitions shall apply:
a) “Consent” – Any explicit, specific and freely given indication by which the User, after having been fully informed, signifies her agreement to personal data relating to her being processed.
b) “Electronic Cookie” – short text of software code, which is transmitted from the web server of our Company and stored at your device each time that you enter the Website, with the aim to collect browsing data within the https://hbbody.com/. The use of electronic cookies is among others necessary for the provision of the “basket” order service.
c) “Personal Data” – Any information relating to a identified or identifiable user of https://hbbody.com/
d) “Processing” – Any operation or set of operations which is performed by Company upon the personal data of the users of www.company.gr., whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;
“User” – The internet user who accesses and browses through www.company.gr., to whom the processed data are related and who is can be identified directly or indirectly.
“Website” – The world wide web site which is accessible through the domain name https://hbbody.com/, including all of its webpages.
Types of Data Collected
At the point (a) of your access and during your use of our Website, (b) of your registration at our newsletters :
a. At the point of your access and during the use of https://hbbody.com/
IP Address.
Browsing data.
Information on your consumer preferences.
Data on executed purchases.
b. At the point of your registration to receive our newsletters
E-mail.
In addition, if you communicate with us via email or by other means, we will collect your personal data related to such communications under the terms and conditions of this Privacy Policy, in order to respond to your requests and to improve our services.
HB BODY does not store your credit card data. Your online payments at https://hbbody.com/ are exclusively processed under strict conditions of confidentiality by financial institutions cooperating with company and are executed by your redirection to secure websites of these institutions.
Therefore, your financial data are collected and processed exclusively by these financial institutions under strict conditions of security and confidentiality.
Processing Purposes
Our Company collects and processes your data mentioned above for the following reasons:
Smooth operation of our online services.
Ease of use and user – friendly customer experience of our website.
Improvement of user experience during the provision of our services.
ΕExecution of our contractual obligations towards our customers.
Improvement of our services, so as to respond as much as possible to the needs of our customers.
Monitoring of user consumption habits through the processing of anonymised statistical data.
Provision of our newsletter service.
After completing the registration process of your personal account or the registration process for our newsletter service or the ordering of products / services you consent to receiving commercial communications, advertising and / or content of a commercial nature or purpose in respect of services of our company or any third parties.
Our Business collects and processes your personal data solely for the purposes mentioned above and only to the extent that is strictly necessary to effectively serve them. Data collected are relevant, appropriate and no more than what is required in view of the above purposes, whereas we strive to keep them accurate and up to date.
Furthermore, your data are retained only for the period required to achieve the purposes, for which they are collected and processed, and are afterwards deleted.
Consent
a) either having acquired your consent, after you have been informed by this Privacy Policy for the types of data, the purposes, the scope of our processing and the recipients or categories of recipients of your data.
b) or having collected data necessary for the execution of your orders.
In specific, by accessing our Website and voluntarily granting us your personal data during your subscription at our newsletter service, the registration of your account and/or the submission of your order(s) as well as by communicating with us, after having been fully informed, you provide to us your explicit, specific and freely given consent for the collection and processing of such data.
Your consent to our collection and processing of your personal data may at any time be revoked by exercising your right to object as provided in this Privacy Policy.
Cookies
Our Website uses cookies. For more details review our Cookie Policy.
Commercial Communications
When you visit our Website or you use electronic means to communicate with us, you accordingly agree to receive electronic communications from us.
When you register your personal account and/or provide us with your email address, you give us your consent to receive electronic communications for purposes related to advertising and the direct marketing of our products / services.
In each relevant electronic communication we shall distinctly communicate our identity and enable you to object and request, easily and for free, to terminate such communication.
Confidentiality of Communications
company carries out the processing of personal data in a manner that ensures the confidentiality thereof. In specific, such processing is only performed by an authorized for this purpose personnel of our Company, taking all available organizational and technical measures for data security against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access and all other unlawful forms of processing.
Recipients of Personal Data
company does not in any way give and/or share your personal data with any third parties either for profit or not. As an exception, our Company may provide access or share your data up to the necessary extent:
With trusted financial institutions for the execution of your payments to us.
With transport companies which we employ to carry out the shipment and delivery of our products to you.
With hosting providers to guarantee the smooth operation of our Website.
With companies which we employ to support our Website and keep our services ongoing.
The processing of your personal data by these entities is conducted under our control and mandates and is subject to the same strict privacy rules. If ordered by a court or other regulatory authority or in any other event that raises our legal obligation to do so, we may give your personal data to the extent provided by law after having given you relevant notice.
Notification to the Data Protection Authority
For the lawful processing of users’ personal data our company may, if and whenever required under the law, lodge a relevant notification to the Data Protection Authority in regard to the establishment of the relevant archive. In addition, our Company shall notify any changes taking place in regard to that archive, whenever required under the law.
User Rights
HB BODY takes all necessary steps both during the collection and in each subsequent phase of processing of your personal data in order to give you full opportunity to exercise your legal rights, i.e. the rights to be informed, access and object, as described below.
a. For this reason, at the stage of their collection you are informed in an appropriate and clear manner by this Privacy Policy, prominently located on our home page, for at least the following elements:
The identity of our Company,
The purposes of the processing of your personal data,
Data recipients,
Your rights.
b. Furthermore, you have the right to request and receive by our Company the following information in a clear and comprehensible manner:
All your personal data and their origin.
The purposes of the processing and the recipients or categories of recipients.
The development of such processing since your last request for information.
The logic of the automated processing of your personal data.
c. In addition, you have the right to raise objections in written form to us by requesting for a specific action regarding your personal data, such as correction, temporary non- use, freeze, non-transfer or deletion. If you request the deletion of your personal data, while such data are necessary for the execution of our obligations to you arising from a contract between us, our Company has the right to reasonably reject your application and inform you accordingly.
International Jurisdiction and Applicable law
Any dispute between company and its Users arising from or in relation to the subject matter of this Privacy Policy shall be governed and construed in accordance with Greek law without reference to its conflict of laws principles and shall be subjected to the exclusive jurisdiction of the competent courts of Athens, Greece.
If a provision of the present Privacy Policy is canceled by a decision of a competent court as unlawful, invalid or unenforceable, this will not affect the validity and enforceability rest of its provisions, which will remain in full force and will be accordingly applied.
CCTV Surveillance System Operation Policy
Information on the Processing of Personal Data via a CCTV Surveillance System, in accordance with Article 13 of the GDPR
The company under the name «HB BODY SA», with its headquarters at Building Block 50, DA Rd. 9, Sindos (hereinafter referred to as the “Company”), hereby informs all individuals entering its internal and external premises that it uses a Closed-Circuit Television (CCTV) surveillance system in accordance with Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”) and the applicable national implementation law 4624/2019.
1. Data Controller:
HB BODY SA, headquartered at Building Block 50, DA Rd. 9, Sindos, Postal Code 57022, Sindos, Tel. +30 2310 790000.
2. Purpose of Processing and Legal Basis:
We use a surveillance and recording system for the purpose of protecting individuals and property. The processing is necessary for the purposes of the legitimate interests pursued by us as data controllers (Article 6(1)(f) GDPR).
3. Legitimate Interests – Purpose of the CCTV System
Our legitimate interest in using a CCTV system lies in the need to protect our premises, vehicles, and property from unlawful acts, such as theft, vandalism, and other illegal activities. The same applies to the safety of life, physical integrity, health, and property of our personnel, customers, and third parties lawfully present within the monitored area. We only collect image data and limit the recording to areas that have been assessed as having an increased likelihood of accidents or unlawful acts, without focusing on areas where individuals’ privacy may be unduly restricted, including their right to the protection of personal data.
4. Recipients
The recorded material is accessible only by our authorized personnel responsible for security. This material is not disclosed to third parties, except in the following cases:
a) to the competent judicial, prosecutorial, and police authorities when the footage contains elements necessary for the investigation of a criminal offense affecting persons or property of the data controller,
b) to the competent judicial, prosecutorial, and police authorities when they lawfully request data in the exercise of their duties, and
c) to the victim or perpetrator of a criminal offense when the footage may constitute evidence of the offense.
5. Data Retention Period
The data is retained for a period of fifteen (15) days, after which they are automatically deleted. In the event that an incident is identified during this period, we isolate the relevant portion of the footage and retain it for up to one (1) additional month to investigate the incident and initiate legal proceedings to protect our legitimate interests. If the incident concerns a third party, the footage may be retained for up to three (3) additional months. The Company is required to revise this notice in the event that the retention period is extended.
6. Data Subject Rights
Data subjects have the following rights:
Right of Access: You have the right to know whether we process your image and, if so, to obtain a copy of it.
Right to Restriction of Processing: You have the right to request that we restrict processing, for example, by not deleting data you consider necessary for the establishment, exercise, or defence of legal claims.
Right to Object: You have the right to object to the processing.
Right to Erasure: You have the right to request the deletion of your data.
To exercise your rights, you may submit a request via email to dpo@hbbody.com, by post, or in person at our premises. Additional information may be required in order to locate the relevant footage and to protect the data of third parties. Please note that exercising the right to object or the right to erasure does not imply the immediate deletion of data or cessation of processing.
In all cases, we will respond to your request in detail as soon as possible and within the time limits set by the GDPR.
7. Right to Lodge a Complaint
If you believe that the processing of your personal data violates Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority in Greece is the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 115 23, Athens, https://www.dpa.gr, Tel. +30 210 6475600.