Privacy Policy

1. About Us

Vassos Eliades Ltd (hereinafter referred to as “we” or “us”) having its registered office at Lefkosias 23, Dali Industrial Area, 2540, Nicosia is operating the Nespresso Professional Website for Cyprus.  

This text aims at providing you with intelligible, transparent and direct information about the processing of your personal data that are collected and processed by us in the context of fulfilling our obligations to you, as we are bound by the applicable legislation to secure and safeguard your right to protection against the illegal processing of personal data and your right to privacy, as well as to protect the personal data maintained by us and are of concern to you.       

Your personal information may help us to better understand your needs and to offer you a more customized service. However, we understand that maintaining the security and confidentiality of your personal data is a big responsibility which we take very seriously.  For this reason, we have drawn up this Policy, among other things, which aims at informing you about the kind of data we collect, why we collect them and how we use them.

 

This Policy is addressed to natural persons, who are current or potential customers, third persons, and associates. By providing your personal information, you accept that we will use such information in the manner analytically explained in this Policy. This Policy covers both our online and offline data collection activities, including Personal Data that We collect through various ways and channels such as other Vassos Eliades Ltd entities, websites, third party social networks, Customer Relationship Centers, Boutiques, points of sales, events, affilaites, partners and collaborators..

When we say that your personal data are subject to “processing”, this term includes every action undertaken in relation to these data, such as the collection, registration, organization, structure, storage, adaptation, variation, recovery, search for information, usage, transmission, diffusion, disposal, correlation, combination, limitation, erasure and destruction. 

In case you require more information on how we process your personal data, you may apply to our Data Protection Officer at the address of our registered office, by emailing us at dataprivacy@vel.com.cy . 

2. Personal Data Processing Principles
   
   In collecting personal data we are bound by the General Data Protection Regulation and, applying the necessary organizational and technical measures, we process your personal data, following the based on the following the principles provided by the GDPR as follows:

• they shall be subjected to legitimate and lawful processing in a transparent manner,
• They shall be collected for specified, express and legitimate purposes and shall not be subjected to further processing in any way incompatible with the purposes for which these data are collected by us,
• Only the appropriate and relevant data shall be collected, limited to the necessary purpose for which they have been collected,
• they shall be accurate and updated as necessary,
• They shall be retained only for as long as required and for the purposes for which they have been collected,
• they shall be subjected to processing in a manner guaranteeing their required security against non-authorized or unlawful processing and accidental loss, destruction or wear, among other things, using suitable techniques and or organizational measures,  When we transmit your personal data whether to another country or to a person who carries out the processing on our behalf, the necessary measures shall be taken by us for the protection of your personal data, as for example through the conclusion of specialized contracts for data processing.

3. 
   What kinds of Personal Data are Processed by us and How we Collect your Personal Data

More often the collection of personal data is performed directly by you. The relevant information may be received through the Website whether directly or indirectly.

 

More analytically, personal data may be collected:

• Websites
• Consumer-directed websites operated by or for Vassos Eliades Ltd including sites that We operate under our own domains/URLs and mini-sites that We run on third party social networks such as
  (nespresso.com.cy)
• E-mail and other electronic messages.
• Electronic communications between you and Nespresso.
• Nespresso CRC.
• Calls to our Customer Relationship Centers (“CRC”). Nespresso Boutiques and Stores managed by Vassos Eliades Ltd.
• Offline registration forms.
• Printed registration and similar forms that We collect via, for example, postal mail, in-store demos, contests and other promotions, or events.
• Points of Sales.
• Demonstrators present in physical third-party stores to assist you with the registering of your machine and coffee ordering.
• Data from other sources
• Third party social networks (e.g. such as Facebook, Google) or market research (if feedback not provided on an anonymous basis).

 

4. 
   Types of Personal Data
   
   Depending on how you interact with Us, (online, offline, over the phone, etc.), We collect various types of information from you, as described below.
   

1. Personal contact information.

 

This includes any information you provide to Us that would allow Us to contact you, such as your name, postal address, e-mail address, social network details, or contact details.

b) Account and profile information.

 

1. 
   c) Demographic information & interests.

Any information that describes your demographic or behavioral characteristics. Examples include your date of birth, age or age range, gender, geographic location (e.g. postcode/zip code), favorite products.

1. d) technical information about computer/mobile device.

Any information about the computer system or other technological device that you use to access one of our websites or apps, such as the Internet protocol (IP) address used to connect your computer or device to the Internet, operating system type, and web browser type and version. If you access a Nespresso website, the collected information will also include, where permitted, your phone’s unique device ID, advertising ID, geo-location, and other similar mobile device data.

1. 
   e) Cookies, Similar Technologies, Log Files, and Web Beacons

As you navigate through and interact with our websites or newsletters, we use automatic data collection technologies to gather certain information about your actions. This includes data such as the links you click on, the pages or content you view and for how long, and other interaction-related statistics such as content response times, download errors, and length of visits to certain pages. These insights are captured using automated technologies such as cookies (including browser cookies and flash cookies), web beacons, and similar tools, as well as through third-party tracking. Information that is not strictly necessary for the functioning of the Website will only be processed following your explicit consent, where required.

1. i) Cookies/Similar Technologies: Please refer to our Cookie Policy for more information on the cookies we use, the purposes for which we use them, and how you can manage your cookie settings.
2. ii) Log Files: We also collect information in the form of log files that record website activity and generate statistics about your browsing behavior. These log entries are created automatically and assist us in troubleshooting errors, improving website performance, and maintaining the security of our websites.
3. e) Market research & consumer feedback.

This includes information that you voluntarily share with Us about your experience of using our products and services.

1. 
   f) Consumer-generated content.
   
   This refers to any content that you create and then share with Us on third party social networks or by uploading it to one of our websites or apps, including the use of third party social network apps such as Facebook. Examples include photos, videos, personal stories, or other similar media or content. Where permitted, We collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third party social networking.
2. 
   g) Payment and Financial information.
   
   Any information that We need in order to fulfil an order, or that you use to make a purchase, such as your debit or credit card details (cardholder name, card details) or other forms of payment (if such are made available).
   
3. h) Calls to CRC. Communications with a CRC will be recorded or listened to, in accordance with applicable laws, to safeguard our legitimate interests. Where required by law, you will be informed about such a recording at the beginning of your call.
4. i) other submissions.We ask your consent (when required) to collect personal information from you when you submit web forms on our websites or when you participate in any interactive features of our Services, participate in a survey, promotion, activity or event, request customer support, communicate with us via third party social media sites, or otherwise communicate with us.
5. 
   How we use your Personal Data

After they have been collected by us, your personal data may be subjected to processing in our insurance company, as previously mentioned, by our employees, associates and or agents, in order to provide you with a customized service.

 

We use your personal data for the following purposes:

 

• To communicate with you
• To make assessments and personalized decisions (With your consent (where required), We use your Personal Data (i) to analyze your preferences and habits,
  (ii) to anticipate your needs based on our analysis of your profile, (iii) to improve and personalize your experience on our Websites and apps; (iv) to ensure that our Websites/apps’ content is optimized for you and your computer device; (v) to provide you with targeted advertising and content, (vi) to allow you to participate in interactive features, when you choose to do so.
• For the provision of our contractual obligation
• For the provision of our services.
• Defining types of customers for new products or services
• To improve the quality of products and of our services
• For the prevention, detection and investigation of crimes, including fraud and the legalization of the proceeds from illegal activities, as well as the appraisal and management of other trading risks.
• To conduct research and analyses data, including an examination of our client basis and other individuals, who have given us their personal details and information, and the risks faced by our enterprise, always in accordance with the prevailing Cypriot and European legislation (including the obtaining of consent when required).
• For promotional marketing and advertising activities. We may undertake the conduct of promotional activities in accordance with your preferences and upon your consent, i.e. using email messages
• For the compliance of our company with the applicable laws and statutory obligations, European Union directives and guidelines, court decisions and other legal processes, and in order to respond to requests by public and state authorities, as stipulated in Cypriot and European legislation.
• Legal reasons or merger/acquisition
• Other general purposes (e.g. internal or market research, analytic, security) in accordance with applicable laws, We use your Personal Data for other general business purposes, such as conducting internal or market research and measuring the effectiveness of advertising campaigns. We reserve the right, should you have Club Member accounts, to reconcile those accounts into one single account. We also use your Personal Data to ensure our security.
• To enforce and defend our legitimate rights and to protect our business activities, including those of our business associates, and to safeguard our rights, individual privacy, security or property assets, as well as the rights of our business associates, yours and those of other persons’ or third persons’; for the purpose of imposing our terms and conditions and pursuing all available recovery measures and containing our damages.

 

6. 
   Sharing Your Personal Data

In addition to Nespresso entities and Vassos Eliades Ltd entities or ad-hoc in-country partners (in charge of Nespresso operations) it might be necessary to share your personal data with our associates and collaborators so that we could provide for you the required services, credit reporting agencies/debt collectors, storage companies, government services, Lawyers, Banks, Courrier and other delivery related Companies, Tax Department, Human Resources Development Authority, Marketing Advisiors, Auditors.       

In no case, however, are we going to share your personal data for processing for purposes contrary to those described in this Policy without your prior notification.

 

In each case arising from our relationship, your personal data may be transmitted to public authorities, researchers, on the basis of the agreement between us. Personal data may be transmitted abroad to associated third-class providers, lawyers and experts.

 

In each transmission to third parties every measure shall be taken beforehand so that only the necessary data shall be transmitted for the implementation of the contract, along with the effective requirements for their legitimate and lawful processing; moreover, the organizations to which the data are being transmitted shall undertake a written commitment that they shall on their part comply with the provisions of the General Data Protection Regulation. Exempts are those cases in which the communication of the data is effected due to some legal or statutory obligation.  

 

In cases where it is necessary to communicate your personal data to countries outside the European Union, which do not offer adequate guarantees for the protection of your personal data, our insurance company shall be obliged and hereby undertakes the responsibility to conclude contractual clauses between us and the Company to which the data are communicated, in order to safeguard the information transmitted.

 

7. Retention Period for your Personal Data

 

We shall retain your personal data in our records only for the time period required for the fulfillment of our contractual obligation between us, unless legal or statutory obligations provide otherwise. This also applies to those cases where our agreement has for any reason been interrupted.

Due to harmonization with the Regulation, we have determined the time periods for the retention of your personal data, depending on the processing to which they are being subjected. The parameters that have been taken into consideration for the determination of the time periods are your better service, our operational needs, our legal obligations and the safeguarding of our legal interests.

In order to be accurately informed on the retention periods, please contact the Data Protection Officer of our Company.

8. 
   What are your rights?
   
   The General Data Protection Regulation defines your rights in regard to your personal data:

 

1. Right to access: You have a right to access your data maintained by us and you may at any time obtain a copy thereof provided we possess them in electronic form.

 

1. Right to rectification: You have a right to access and rectify your personal details. You may at any stage of our relationship check and update your personal data, always presenting the necessary documentation and requesting the rectification or completion of inaccurate information.

 

1. Right to be forgotten: You have the right to ask for the erasure of the whole or part of the data that concerns you. We would like to underline however that we shall be obliged to erase only personal data which can be erased as per our data erasure policy.

 

1. Right to restriction: You hold the right to ask for the processing of your personal data to be restricted, even when the accuracy of the data is disputed or furthermore when the data are no longer useful to usour Firm but you request their retention due to legal claims/requests. 

 

1. Right to object: You may at any time whatsoever raise objections about the processing of your personal data. In case you make use of this right, the processing shall immediately cease, unless we can prove the existence of legal interest or the need to use the data in support of a legal/judicial case. 

 

1. Right to data portability: You have the right to portability, that is, to transfer your personal data to another organization in a legible and commonly used form. The said data shall be erased as specified in our erasure policy.
2. Right to recall consent: You have the right time to withdraw your consent to the processing of your personal data, without however affecting the legality on which our policy was based prior to your withdrawal. We would like to inform you that the recall of your consent may possibly lead to the termination of the relevant services.
3. Right to launch complaint: You have the right to launch a complaint with the Commissioner for the Protection of Personal Data, regarding the processing of your personal data.

 

If in filing your complaint you feel that you have been wronged by us or if you have any doubts about the outcome of your request, you may submit it in writing to the Commissioner for the Protection of Personal Data at the below address:  

 

Office of the Commissioner for the Protection of Personal Data

 

Kypranoros 15, Nicosia 1061,

P.O. Box 23378

1682 Nicosia

Τel.: 22818456 Fax No.: 22304565

email: commissioner@dataprotection.gov.cy

In order to exercise your rights as above or in the case where you require more information concerning your rights, you may communicate with our  Data Protection Officer through the email address dataprivacy@vel.com.cy by or writing to us at 23, Lefkosias Street, Dali Industrial Area, 2540, Nicosia, Cyprus. If the request is submitted by a person other than you, without providing evidence that the request is legitimately made on your behalf, the request will be rejected.

10. 
    Changes To Our Notice
    
    Changes in the Legislation or technological developments impose corresponding modifications on our part.

 

You are kindly asked to keep apace with our Policy, which may at any time change in order to adapt to new developments and facts. 

 

Our reviewed policy shall be posted on our website at the address (link)

 

Finally, you may ask to be supplied with a copy of the most recent version of the Policy in printed form.