Privacy Policy

Privacy Policy

Welcome to the website www.stepsport.gr.

At www.stepsport.gr we have taken all necessary measures to uphold the fundamental principles of personal data protection, to safeguard your privacy, and to maintain the confidentiality of your information, in compliance with the provisions of Directive 2016/680.

Below, in question-and-answer format, we provide some basic information about how we collect, use, store, and generally process and keep your personal data secure.

This personal data protection policy refers to and covers all online services provided by us on the internet, and in particular all social media accounts belonging to our group of companies, mobile and tablet applications, social media pages such as Facebook, Instagram, LinkedIn, and the applications we offer or use from time to time.

For more information on how cookies are used, please refer to the "Cookies Policy" section. For information about our services, please refer to the "Terms and Conditions" section. If you would like more information about how we collect, use, and store your personal data, you can contact us at any time in one of the following ways: 1) by sending an email to [email protected], 2) by calling +30 2341306400, or 3) by sending a letter to the www.stepsport.gr personal data protection team at our Head Offices (Leventochori Junction, Kilkis, 61100).

The website www.stepsport.gr belongs to the company "Laidis Stefanos S.A.", VAT No. (AFM) 997226779, Tax Office (DOY) of Kilkis.

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA

Under data protection legislation, the data controller is responsible for keeping your data secure, providing accurate information about how your data is used, and upholding your rights regarding your data.

The website www.stepsport.gr is owned and managed by Stefanos Laidis, Chairman and CEO of "Laidis Stefanos S.A.", resident of Kilkis, VAT No. (AFM) 073278033, Tax Office (DOY) of Kilkis. For the purposes of the 2016 General Data Protection Regulation, the above person is designated as the data controller.

2. WHAT PERSONAL DATA WE COLLECT

The personal data we collect is the data you provide to us when registering as a customer, when logging in to our website, when placing an order, when signing up for marketing communications, or when using any service offered by our website (www.stepsport.gr).

The data we collect includes only the personal information that is strictly necessary in each case and that you provide to us. Please note that certain fields are mandatory, as they concern data necessary for providing the service or for your access to the specific feature. Please bear in mind that if you decide not to provide us with this information, you may not be able to complete your registration as a customer or enjoy those services or features.

Providing any personal information is not necessary for simply browsing our website. Specifically, when registering as a customer, you are asked for: your first name, your last name, your email address, and your password. If you wish to place an order and purchase one of our products, you are asked for the following personal data: your first name, your last name, your address (country, postal code, city, street), and your email address. If, in addition to the above, you also wish to receive an invoice, you are required to provide your VAT number (AFM), the competent Tax Office (DOY) you fall under, and your activity (individual, business, etc.). If you choose to pay by credit/debit/prepaid card, you will also need to provide us with your credit or debit card number and its expiry date, if you proceed to complete the purchase of a product of our company. In addition, we collect data about your shopping habits and the pages and products you have viewed while using our website, in order to recommend products that match your choices and preferences; and if you sign up for our Newsletter, we gather information about the purchases you have made in relation to the newsletters we have sent you.

3. FOR WHAT PURPOSE WE COLLECT YOUR PERSONAL DATA

As mentioned above, the processing of personal data by our company is carried out depending on how you interact with our website (e.g. depending on the services, products, or features you wish to receive). The data processed concerns your identity details (first name, last name), financial and transaction information (VAT number, Tax Office, payment card number), and your shopping habits (whether you have signed up for our newsletter, which products you selected through our website, etc.). This processing is carried out for the following reasons:

To manage your registration as a customer

If you decide to register as a customer on our website, in order to identify you as a user, we must first process your strictly necessary data (first name, last name, email address, and password) and then give you access to the various features and products available to you by virtue of your status as a registered customer. You can cancel your registration at any time by first contacting us through Customer Service.

To fulfill our contractual obligations arising from the conclusion of a product sales contract

If you decide you want to proceed with ordering and having the selected product(s) shipped, you will be asked for information concerning your identity details (first name, last name), your address (country, postal code, city, street), and your email address. If, in addition to the above, you wish to receive an invoice, you are also required to provide your VAT number (AFM), the competent Tax Office (DOY) you fall under, and your activity (individual, business, etc.). If you choose to pay by credit/debit/prepaid card, you will also need to provide us with your credit or debit card number and its expiry date, if you proceed to complete the purchase of a product of our company.

All of the above details are necessary for the purpose of completing the sales contract, and primarily in order to:

1. fulfill our contract with you, including enabling payment for the purchase of our products without requiring your physical presence at the store, and deliver our products to the location you indicate to us.
2. contact you regarding your order, for which a contract has been concluded, and so that you can inform us of any problems or if further clarification is needed for its shipment, as well as to confirm delivery in case your address proves difficult to locate.
3. manage the payment for the products you purchase, regardless of the payment method used. If you choose to activate the feature of saving your card details for future purchases, we must process the data indicated for the activation and operation of this feature. Your consent to activating this feature allows the automated payment details to appear in subsequent purchases, so that you do not have to re-enter them in each new process, and these details are considered valid and active for future purchases. You can modify or delete your cards at any time through the Payment Information section.
4. manage any returns (after you have made a purchase) as well as requests for information about product availability and reservations through the website.
5. issue tax documents, and specifically invoices. If you choose to have them issued, Greek law requires that you provide us with your VAT number (AFM) and the Tax Office (DOY) you belong to, as well as your status as an individual or a business (in the case of a legal entity, you must inform us of the type of business, so that the above tax document can be properly completed).
6. ensure that you can also use (provided we have your consent) other available features or services, such as the Gift Card or Gift Voucher, which you will also be able to use in our physical stores.

To serve you in the context of a request submitted to Customer Service

When you contact our Customer Service team, we may collect additional data to help us resolve any questions regarding your order, delivery, payments, marketing, our website, or any other inquiries you may have.

For marketing purposes

If you sign up for our Newsletter. In this case, and with your express consent, we process your personal data to manage your subscription, including sending personalized information about our products or services through various channels (such as email or SMS). Likewise, you should bear in mind that this data processing includes analyzing your profile as a customer or buyer, in order to determine your preferences and, consequently, which products and services best match your profile when sending information to you. For example, based on your purchases and browsing history (i.e. depending on the products you show a preference for by clicking on them), we recommend products we believe may interest you, and, if you are a registered user, we provide you with the "Cart Recovery" feature.

In any case, you can unsubscribe from the Newsletter at any time, free of charge, through the "Newsletter" section of the website as well as via the instructions provided in each communication.

By participating in any promotional campaign, you authorize us to process the personal data you have shared with us in connection with that campaign and to publish it — on our part — through various channels such as social media or the website itself. In each promotional campaign you participate in, you are provided with the terms and conditions, where all information regarding the processing of your data is set out in detail.

Your personal data is also used by us to send sales and marketing communications that we believe may be of interest to you (where we have your express consent for this activity, or where you are already a customer and we have a legitimate interest in contacting you). You have the right to opt out of our sales and marketing communications at any time.

For the purpose of improving the services we provide

If you visit our website, please be informed that we will process your browsing data in order to understand how you interact with the website and to make possible improvements to it. In addition, we occasionally conduct quality surveys and initiatives aimed at gauging the level of satisfaction of our customers and buyers and identifying the areas in which we can improve.

4. ON WHAT LEGAL BASIS WE COLLECT AND PROCESS YOUR PERSONAL DATA

We are entitled to collect, process, and use your personal data as follows:

1. As regards the management of your registration as a customer, we process your strictly necessary personal data (first name, last name, email address, password), which you provide to us and which is necessary for the performance of the terms governing the use of the website. Registering as a customer is not necessary for simply browsing the website, but it is required in order for us to manage your registration if you wish to use the website's services (e.g. the shopping cart). The use of your data is necessary for our legitimate interest in ensuring that the service we provide to you is delivered properly, and is also based on your own consent, given that you can browse our website without registering as a customer.
2. As regards the details you provide to us for order processing and product purchase, the personal data is strictly necessary for the performance of the purchase contract, so that we can process your payment and send you the order confirmation, in fulfillment of the contract. Certain data processing operations related to the purchase process are activated only because you request or approve them, such as saving payment (card) details for future purchases. In these cases, the processing of your data is based on your own consent. We further have a legitimate interest in carrying out the necessary checks to detect and prevent possible fraud when you make a purchase. The processing of this data is beneficial for all parties involved when a purchase payment is made, and especially for you, as it allows us to take measures to protect you from fraud attempts by third parties.
3. If you submit a request in the context of customer service, we undertake the processing of the personal data you provide to us of your own free will and with your consent. In any case, we have a legitimate interest in responding to your requests or inquiries through the various existing communication channels. When you contact us regarding matters concerning the handling of incidents related to your order or to the product or service acquired through the website, the processing of your data is necessary for the performance of the purchase contract. When your inquiry relates to the exercise of your rights (about which we inform you below) or to claims regarding our products or services, we are entitled to process your data in order to comply with our legal obligations.
4. In the context of processing your personal data for marketing purposes, we are entitled to process your data for the above purposes on the basis of the prior consent you give us (e.g. when you agree to receive personalized information through various channels, when you authorize us to send notifications, or when you accept the legal terms and conditions in order to participate in a promotional campaign). In order to show you personalized information, we have a legitimate interest in creating a profile with information we have gathered from you (based on your browsing, your preferences, or your purchase history) as well as personal data you have provided to us, thereby improving your experience as a user of the website and giving you access to information in line with your preferences.
5. As regards the information we use to improve our services, we have a legitimate interest in improving and analyzing the usability of our website, as well as in assessing user satisfaction. It is thus understood that the processing of this data is equally beneficial to you, since its purpose is to improve the user experience and offer a higher quality of service.

The processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), the more specific national and European legislation — for certain sectors — the Greek legislation in force at any given time — on the protection of personal data and of personal data and privacy in the electronic communications sector — (Law 3471/2006, as in force), and the decisions of the Hellenic Data Protection Authority (HDPA).

5. FOR HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

Depending on the purpose for which we collect and process your personal data, we set out below the required retention period.

In detail:

• For the Management of your Registration as a customer, we process your personal data for as long as you remain a registered user. You have the right to request deletion at any time.
• For the purposes of Contract Performance, we process your data, in principle, until the contract is completed. Furthermore, we retain your data for the management of any returns (in accordance with the terms and conditions set out in the relevant section), and for the handling of complaints or claims related to the purchase of the specific product or service. If you use the option of saving your card payment details, we retain your data until you request its deletion.
• For Customer Service purposes, we process your data for as long as is required to satisfy your request or application.
• For Marketing purposes, we process your data until you unsubscribe or cancel your subscription to the Newsletter.
• For the purpose of improving our website, we process and retain your personal data for the duration of the period of assessing the usability of our website or for a specific quality survey, or until we anonymize your browsing data.

Regardless of how we process your data during the period strictly necessary to achieve the relevant purpose, we subsequently keep it duly stored and protected for the period during which liability could arise from the processing, in accordance with the legislation in force at any given time. Once the limitation period for each claim has expired, we proceed to delete your personal data.

6. WHAT ARE YOUR RIGHTS REGARDING OUR USE OF YOUR PERSONAL DATA

You may exercise, as applicable, the following rights:

• Right of access: the right to know which of your data we use, why we use it, and who receives it.
• Right of rectification: the right to correct, at any time, any omissions or inaccuracies in your personal data.
• Right of erasure: the right to have your personal data deleted, provided that its processing is not required for the fulfillment of our obligations towards third parties.
• Right to restriction of processing: the right to contest the accuracy of your data.
• Right to data portability: the right to request and receive your data in a structured, commonly used format.

These rights may be exercised free of charge in one of the following ways: 1) by sending an email to [email protected], 2) by calling +30 2341306400, or 3) by sending a letter to the www.stepsport.gr personal data protection team at our Head Offices (Leventochori Junction, Kilkis, 61100). A charge may apply only if the exercise of these rights is repeated frequently and, due to its volume, imposes an administrative cost on our company, in which case, after informing you, you may be charged the relevant cost.

If you exercise any of these rights, we will take every possible measure to satisfy your request within thirty (30) days of receiving it, after informing you either of its satisfaction or of the objective reasons preventing its satisfaction.

In addition, you may at any time object to the processing of your personal data by withdrawing the consent you have given, which will result in the inability to complete the contract for the sale and delivery of the goods. Finally, you have the right to lodge a complaint with the competent regulatory authority, in particular with:

• the Hellenic Data Protection Authority (http://www.dpa.gr), which is based in Athens (1-3 Kifisias Ave., 115 23)

For any matter concerning the processing of your data, you may contact [email protected], call +30 2341306400, or send a letter to the Step Sport Personal Data Protection Team at our Head Offices (Leventochori Junction, Kilkis, 61100).

7. WHETHER WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES

In order to fulfill the purposes set out in this policy, it is necessary to give access to your personal data to the natural or legal persons we cooperate with, as well as to third parties who provide support for the services we offer you.

Specifically:

1. your data is transmitted to departments of our business and to the staff working in them, for the completion of our transactional relationships, the fulfillment of orders, the issuance of the required document accompanying the order, the delivery of the ordered goods, and the promotion of the services for which consent has been given. Indicatively, some of the aforementioned departments are accounting, marketing, order acceptance, IT, and wholesale.
2. in addition, your data may be transmitted to and made accessible by legal or natural persons with whom we maintain, from time to time, business relationships for the proper fulfillment of our contractual obligations (for example, a courier company for the delivery of the ordered products), as well as by public authorities or financial institutions (banks), where requested for a lawful reason. However, you should be aware that, in this case, these legal or natural persons will process your personal data exclusively for the purpose of providing services to us and not for their own benefit, acting as data processors.

The transmission of data to third parties, other than those mentioned above and the parties hereto, is possible only: a) where it is necessary for the performance of the contract, or b) where it is required by law or legal rule, court decision, or prosecutor's order.

In every transmission, all measures are always taken to ensure that the data transmitted is always the minimum necessary and that the conditions for lawful and fair processing with adequate safeguards are always met, maintaining the security of your data.

8. HOW THE SECURITY OF YOUR DATA IS ENSURED

To remain consistent in upholding the fundamental principles of protecting your data and to prevent any breach of your privacy and confidentiality, we employ all modern technical and organizational measures appropriate for the purposes of the processing. Indicatively, we have implemented encryption of your details as well as anonymization through the use of an SSL security certificate — provided by Cloudflare. We review the operation, effectiveness, and updating of the above means and techniques at regular intervals.