This Privacy Notice applies to the personal data of visitors to this website.
Depending on the relevant circumstances and applicable local laws and requirements, we may collect some or all of the information listed below to help us with this:
We collect your personal data in three primary ways:
There are numerous ways that you can share your information with us. These include:
We may seek more information about you from other sources generally including from third parties.
Personal data we collect automatically
When you visit our website, we collect technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. We use the information for statistical reporting and do not link it to any named individuals.
British American Tobacco HELLAS S.A. will not intentionally collect any information about visitors to this website who are under eighteen years of age. If British American Tobacco HELLAS S.A. becomes aware that a child has provided any information this will immediately be deleted from its records.
We collect, use and disclose your personal data for a number of reasons, including:
We will share your personal data primarily to ensure we provide you with the most relevant and up to date news, content and events, or to ensure we can respond to any query quickly and expeditiously. Unless you specify otherwise, we may share your information with any of the following groups:
We do not share, rent or trade your information with third parties for marketing or promotional purposes.
We will not keep your personal data for longer than is necessary for the purposes for which we collect it unless we believe that the law or other regulation requires us to preserve it (for example, because of a request by a tax authority or in connection with any anticipated litigation).
When it is no longer necessary to retain your data, we will delete the personal data that we hold about you from our systems.
When processing is performed under a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and / or support of legal claims under the contract.
For the purposes of promoting products and services (marketing activities) & market research, your personal data is kept until your consent is revoked. This can be done by you at any time. The revocation of the consent does not affect the legality of the processing based on the consent in the period prior to its revocation.
We care about protecting your information. That's why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal data.
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures, including encryption measures and disaster recovery plans.
Unfortunately, there is always risk involved in sending information through any channel over the internet. You send information over the internet entirely at your own risk. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet and we do not warrant the security of any information, including personal data, which you transmit to us over the internet.
If you suspect any misuse or loss of or unauthorised access to your personal information please let us know immediately. Please raise your concern by contacting us using our contact details in the Contact us section of the website or by sending an email to email@example.com, in the first instance, and we will investigate the matter and update you as soon as possible on next steps.
You have various rights in relation to the data which we hold about you which you can exercise by sending an email to firstname.lastname@example.org. We have set these out below.
This right enables you to object to us processing your personal data where we do so for one of the following reasons:
Where we have obtained your consent to process your personal data for certain activities, you may withdraw this consent at any time (by sending an email to email@example.com, while you also have the option to unsubscribe in the emails you receive from us) and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.
You have the right to request that we "erase" your personal data in certain circumstances. Normally, this right exists where:
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
You have the right to request that we restrict our processing of your personal data in certain circumstances, for example if you dispute the accuracy of the personal data that we hold about you or you object to our processing of your personal data for our legitimate interests. If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal data.
You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
If you wish, you have the right to transfer your personal data between service providers. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you.
You also have the right to lodge a complaint with your local supervisory authority which is the Hellenic Data Protection Authority (HDPA) in Athens. You can contact them in the following ways:
You can contact them in the following ways:
If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal data (where consent is our legal basis for processing your personal data), please contact us using our contact details in the Contact us section of the website or send us an email to firstname.lastname@example.org. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
British American Tobacco HELLAS S.A. is responsible for processing your personal data.
If you have any comments or suggestions concerning this Privacy Notice please contact us contacting us using our contact details in the Contact us section of the website or sending us an email to email@example.com. We take privacy seriously and will get back to you as soon as possible.
Your personal data may be transferred outside of the European Economic Area to the types of entities described in section 4 above.
We want to make sure that your personal data is stored and transferred in a way which is secure. We will therefore only transfer data outside of the European Economic Area or EEA (i.e. the Member States of the European Union, together with Norway, Iceland and Liechtenstein) where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, for example:
There are a number of different ways that we are lawfully able to process your personal data. We have set these out below.
We are allowed to use your personal data where it is in our interests to do so, and those interests aren't outweighed by any potential prejudice to you.
We believe that our use of your personal data is within a number of our legitimate interests, including but not limited to:
We don't think that any of the activities set out in this Privacy Notice will prejudice you in any way. However, you do have the right to object to us processing your personal data on this basis. We have set out details regarding how you can go about doing this in section 7 above.
We are allowed to use your data where you have specifically consented. In order for your consent to be valid:
When you register on our website, we ask you for specific consents to allow us to use your data in certain ways. If we require your consent for anything else in the future we will provide you with sufficient information so that you can decide whether or not you wish to consent. Your consent – provided that you give it - is the legal basis for receiving communications of promotions, offers, new products, as well as your participation in market research.
You have the right to withdraw your consent at any time. We have set out details regarding how you can go about this in section 7 above.
We are allowed to use your personal data when it is necessary to do so for the performance of our contract with you.
For example, to inform you in the context of the supply of our products and your service.
As well as our obligations to you under any contract, we also have other legal obligations that we need to comply with and we are allowed to use your personal data when we need to in order to comply with those other legal obligations.