Privacy Policy
1. INTRODUCTION
This Privacy Policy applies to the website onesalonica.com (hereinafter the “Website”), in terms of accessibility and usage.
Onesalonica.com is a shopping center website operated and maintained by the Greek société anonyme under the corporate name “ONE OUTLET ANONIMI ETERIA DIAXIRISIS KE EKMETALEFSIS EKPTOTIKON KENTRON” , with registered office at 77 Poseidonos Avenue, Alimos, Attica, 17455, Greece (VAT No.: 800596468 / Tax Office: KEFODE ATTICA) (hereinafter the “Company”). The Company forms part of the corporate group of “FAIS HOLDING SOCIETE ANONYME”.” ( registered office 77 Poseidonos Avenue, Alimos, Attica, 17455, VAT No. 800907275, GEMI No. 144651701000) within the meaning of Article 31 of Law 4308/2014 (hereinafter the “Group”, and the parent entity “FAIS HOLDING SOCIETE ANONYME”).
In the context of certain processing operations carried out within unified Group actions and infrastructures (including, indicatively, centralised management of communication databases and campaigns, shared communication and promotional platforms/systems, and consolidated analytics at Group level), the Company and FAIS HOLDING SOCIETE ANONYME may act as joint controllers within the meaning of Article 26 of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”). For all other processing operations relating exclusively to the operation and management of the Website by the Company, the Company acts as an independent data controller.
Any natural person accessing or using the Website shall hereinafter be referred to as the “Data Subject” or “Subject”.
The processing and protection of your personal data are governed by this Policy, as well as by the applicable provisions of Greek, European and international law concerning the protection of individuals with regard to the processing of personal data, including decisions issued by the Data Protection Authority. Any future amendments to the applicable legal framework shall be reflected in this Policy.
This Privacy Policy (hereinafter the “Data Policy”) is intended to inform you of the Company’s policy regarding the collection and processing of your provided personal data, the purposes of such processing, the categories of recipients, and the procedures available for exercising your statutory rights.
The Company reserves the right, at its sole discretion or under the authority of a joint controller with FAIS HOLDING SOCIETE ANONYME, to amend, modify or update the conditions/ regulations of this Data Policy, in whole or in part, at any time. Any such amendment shall become effective immediately upon its publication on the Website. Users are encouraged to review this Policy periodically.
Your continued use of the Website following any such amendments shall constitute your unconditional acceptance thereof. If you do not agree with this Policy, you must cease using the Website.
The protection of your privacy and personal data is of paramount importance to the Company. Personal data are processed lawfully, fairly and transparently, and appropriate technical and organizational measures are implemented to ensure their security. To find more about the way the Company process personal data, users are encouraged to review our Data Policy where they can find all important information regarding your personal data processing by our Company in relation to your browsing in the onesalonica.com website and the usage of our provided services.
Users are also encouraged to review the Cookies Policy of our Website, which includes in detail information related to the provided services. Certain services may be subject to specific legal terms and regulations. In such case, we will make sure to offer you all the necessary information that is required accordingly.
The Company shall bear no responsibility for the Protection and Personal Data management or any third-party websites privacy practices that are hosted by our Website and are accessible through different links.
For any queries or requests relating to our Data Policy or the processing of your personal data, you may contact the Data Protection Officer (DPO) at dpo@onesalonica.com or by post at the Company’s registered address.
In cases of joint processing with FAIS HOLDING SOCIETE ANONYME pursuant to Article 26 GDPR, you may also contact dpo@faisgroup.com.
Joint Controllers – Article 26 GDPR (where applicable)
The Company and FAIS HOLDING SOCIETE ANONYME. have entered into a specific arrangement pursuant to Article 26 of the GDPR, whereby their respective responsibilities for compliance with the obligations under the Regulation are determined with regard to jointly carried out processing activities (indicatively: centralized management of campaigns and communication databases, shared communication and marketing infrastructures/systems, consolidated analysis/statistics at Group level).
Data subjects may exercise their rights in respect of and against any of the joint controllers (Article 26(3) GDPR). The essence of the arrangement is made available to the data subjects through this notice.
Controller(s) – as applicable
A.Independent Controller
“ONE OUTLET ANONIMI ETERIA DIAXIRISIS KE EKMETALEFSIS EKPTOTIKON KENTRON”, having its registered seat in Alimos (77 Poseidonos Avenue, Alimos, Attica, Postal Code 17455), Greece (Tax Identification Number (TIN): 800596468 / Tax Office: KEFODE ATTICA).
B. Joint Controllers (where applicable – e.g. Loyalty programs / unified Group campaigns / shared infrastructures)
(i) FAIS HOLDING SOCIETE ANONYME, 77 Poseidonos Avenue, 174 55 Alimos, Attica Greece, Email: info@faisgroup.gr
(ii) ONE OUTLET ANONIMI ETERIA DIAXIRISIS KE EKMETALEFSIS EKPTOTIKON KENTRON, having its registered seat in Alimos, Attica (77 Poseidonos Avenue, Postal Code 17455), Greece (Tax Identification Number (TIN): 800596468 / Tax Office: KEFODE ATTICA).
2. PERSONAL DATA PROTECTION POLICY
2.1. Definition of Personal Data
“Personal Data” shall mean any information relating to a data subject, namely any information relating to an identified or identifiable natural person to whom the data pertains, whose identity is known or can be ascertained.
Such information, as defined by applicable law and relevant European provisions, includes, by way of example, the subject’s name, address, date of birth and gender, mobile telephone number, email address, as well as usage data, such as, indicatively, username, password and IP address.
2.2. Collection and Processing of Personal Data
No personal data is required by the Company for the mere browsing of the website onesalonica.com. However, while you browse or use the services provided through onesalonica.com, the Company collects and processes browsing data relating solely to your navigation habits.
For further details regarding the information collected through cookies and similar technologies, please refer to the relevant section “Cookie Policy”.
The categories of personal data that the Company collects and processes (e.g. through stores, websites, social media) are as follows:
(a) We collect your email address, title, first name, last name, date of birth, city, postal code, mobile number and country upon your registration to our Newsletter service, for the purpose of sending you newsletters regarding the Company, onesalonica.com, its products/services, available offers, etc.
If you choose to subscribe to our email newsletter, the email address you provide will be transferred to Rocket Science Group LLC, which provides us with email marketing services. We consider Rocket Science Group LLC to be a third-party data processor (see Section 2.5 below). Your email address will remain stored in the database of Rocket Science Group LLC for as long as we continue to use its services for email marketing purposes or until you explicitly request deletion from the list. You may do so by using the unsubscribe links contained in any email newsletters sent to you. For as long as your email address remains in the database of Rocket Science Group LLC, you will periodically receive newsletters from us via email. In the context of sending newsletters/campaigns, where shared infrastructures and/or centralized management at Group level are used, the processing may be carried out jointly with FAIS HOLDING SOCIETE ANONYME (Article 26 GDPR).
(b) We collect and process Personal Data, such as your first name, last name, email address and telephone number, which you provide to us when you contact our Customer Service, in order to ensure the possibility of communicating with you, for the purpose of providing information regarding new products/services.
If you choose to contact us using the contact form on the “Contact” page, none of the data you provide will be stored by this Website or transferred to / processed by any of the third-party data processors referred to in Section 2.5. Instead, such data will be incorporated into an email message solely for the purpose of responding to your inquiry.
(c) In the event that you provide personal data of third-party contracting parties (such as, indicatively, name, surname, address, telephone number) on this Website, such Personal Data of the third party shall be protected in accordance with this Third – Party Personal Data Protection Policy. Where you provide us with personal data of third parties, you confirm that you have duly informed such third party of the purposes and the manner in which their personal data will be processed.
We collect and process Personal Data, such as your first name, last name, email address, telephone number, date of birth and gender, for your participation in the Loyalty program of the companies of the FAIS HOLDING SOCIETE ANONYME Group, in order to enable you to enjoy benefits across all Group companies and to receive updates regarding their products (indicatively, offers, new arrivals, etc.) and their services, through communication channels including email, SMS & Viber, in-app messages, push notifications and potentially additional communication channels. For the above-mentioned processing relating to your participation in the Loyalty program and the relevant commercial communications at Group level, the Company and FAIS HOLDING SOCIETE ANONYME act as joint controllers (Article 26 GDPR). For the Personal Data Protection Policy of FAIS HOLDING SOCIETE ANONYME you may refer to the following link: https://www.faisgroup.com/el/politiki-prostasias-prosopikwn-dedomenwn
SOCIAL MEDIA: We may process your Personal Data obtained through social media platforms (including Facebook, Instagram) or online reviews regarding our Company. If you choose to contact us via social media to receive a response to your inquiries or information regarding our products and services, none of the data you provide will be stored by this Website or transferred to / processed by any of the third-party data processors referred to in Section 2.5. Instead, such data will be incorporated into a message solely for the purpose of responding to you. To exercise your rights, as described in the section DATA SUBJECT RIGHTS, ACCESS AND DELETION, please do not use social media platforms. To exercise the above rights or for matters relating to the processing of your personal data, please submit your request using the Company’s specially designed forms at any of our stores, or you may contact the Company’s Data Protection Officer (DPO) in writing, either by postal or electronic mail, using the following details: 77 Poseidonos Avenue, Alimos, Attica, Postal Code 17455, attention DPO, and/or email: dpo@onesalonica.com. Some of our social media pages allow users to submit their own content. Please note that any content submitted to one of our social media pages may be visible to the public, and you should exercise caution when providing certain personal information (e.g., financial information or address details) through these platforms. We are not responsible for any of your actions resulting from the disclosure through of personal information on any of our social media platforms (e.g., Facebook or Instagram). Please also refer to the respective privacy and cookie policies of the social media platforms you use.
2.3. Purpose of Collection and Processing of Personal Data
The personal data you provide during your visit/browsing of the pages and services of the onesalonica.com website are collected and processed solely and exclusively for the following purposes:
To send newsletters from the Company and onesalonica.com, for commercial communication regarding our products and services, so that you are informed about innovations, new arrivals, exclusive products, and offers.
For your participation in the Loyalty program of the FAIS GROUP of companies, to record your purchasing habits and enable the sending of personalized newsletters from FAIS HOLDING SOCIETE ANONYME for commercial communication regarding the products and services of the Group companies, so that you are informed about innovations, new arrivals, exclusive products, and offers.
For communication between us and the management of your requests through the Customer Service Department
For the improvement of the services provided. With your consent, we may use your contact details in the context of conducting market research and broader surveys to assess satisfaction, in order to improve our services and our relationship with users.
For purposes of statistical research and analysis using aggregated data, in order to understand how users interact with and use the onesalonica.com Website, thereby improving our products and services.
To display advertisements and content to you on social media platforms
In the above cases, the processing of your Personal Data is considered lawful as it aims to provide a specific service that you have requested.
In cases where the purposes and/or means of processing are determined jointly with FAIS HOLDING SOCIETE ANONYME (e.g., centralized campaigns / shared communication infrastructures / consolidated analysis), the lawful basis and the corresponding compliance obligations apply jointly in accordance with Article 26 GDPR.
Such data may not be used by any third party without compliance with the applicable legal provisions.
2.4. Retention Period of Personal Data
The Company processes your personal data for the entire duration of the relevant contract and, regarding its termination or expiration for any reason, for as long as required by the applicable legal framework.
Specifically, the personal data processed by the Company are retained for the period necessary to fulfill the purpose of the processing for which they were collected and/or in accordance with the applicable legal framework.
Upon the expiration of this retention period, the data shall be retained in accordance with the applicable legal framework for the period provided following the termination of the business relationship, or for as long as necessary to safeguard the Company’s rights before a court or any other competent authority.
2.5. Recipients of Personal Data and Purpose of Their Transfer
The transfer of data between companies within the Group, where applicable in the context of joint processing, does not constitute a transfer to third parties but shall be considered processing between joint controllers and/or intra-group processing in accordance with this Policy.
Your Personal Data are processed by the Company acting as the Data Controller.
For organizational and operational requirements related to the provision of services through onesalonica.com, the Company may transfer your personal information to its representatives and/or subcontractors for the purpose of supporting, promoting, and executing your transactional relationship with the Company, but always under conditions that ensure that your personal data are not subject to any unlawful processing, i.e., processing other than for the purpose of the transfer in accordance with the above.
The Company reserves the right, for the purposes described above, to transfer your Personal Data:
To third parties, natural or legal persons, who may provide services on behalf of the Company for the promotion and marketing of the Company and its products or services, including through social media platforms.
Or to third-party partners who provide technical services, such as, indicatively, hosting and technical support services.
In FAIS HOLDING SOCIETE ANONYME, which (where applicable, in particular in the context of the Loyalty program and/or unified commercial communications / Group infrastructures) acts jointly with the Company as a joint controller (Article 26 GDPR), as well as to third-party providers (indicatively: INTELIQUA) who technically support the relevant functions as data processors, in accordance with the provisions of the relevant agreements.
All partners, representatives, and/or subcontractors have been assessed and selected by the Company based on proven reliability and capability, and all comply with the legislation referred to in the above sections. In the event that any of them are based in countries outside the European Union, the transfer of your Personal Data is carried out with the safeguards provided by law.
The Company and onesalonica.com will not sell, transfer, or otherwise disclose the personal data of the Website’s Data Subjects to third parties, other than those mentioned above, without the consent of the Data Subject, except where required by applicable law and solely to the competent authorities. The data maintained in the records may be disclosed to competent judicial, police, and other administrative authorities upon lawful request and in accordance with the applicable legal provisions at the time. Furthermore, in the event of a lawful order, official instruction, or formal preliminary investigation, onesalonica.com and the Company reserve the right, without further notice, to provide the relevant data to the respective authority.
2.6. Data Subject Consent
By using any service on onesalonica.com, you acknowledge that you have read the present Policy. Your consent is requested only where required by law and is provided through an explicit action (e.g., selection of the relevant box/checkbox), in particular for registration to newsletters/commercial communications and for cookies beyond those strictly necessary. Specifically:
2.6.1. Marketing and Advertising Activities
By subscribing to the Newsletter service on onesalonica.com, you consent to onesalonica.com processing and using your personal data for marketing activities, such as sending emails containing general or promotional information (newsletters) regarding the Company, its products, and its services.
If you wish, onesalonica.com will refrain from using your Personal Data for advertising purposes, provided, however, that you request or follow the procedures for removal from the list of registered members receiving newsletters from onesalonica.com. You may, at any time, send an email to dpo@onesalonica.com or unsubscribe from such communications by following the procedures indicated in each newsletter-type email you receive from us.
2.6.2. Processing in Relation to Fraudulent Acts
The Company is legally obliged to notify the Personal Data Protection Authority of any unlawful breach of the Website’s Personal Data database or any third-party data processing database to all relevant persons and authorities within 72 hours of the breach, if it is likely to result in a risk to the rights and freedoms of natural persons, in accordance with the GDPR.
2.6.3. Processing in Relation to Your Participation in the Loyalty Program
Processing related to your participation in the Loyalty program of the FAIS GROUP of companies, the recording of your purchasing habits, and the sending of newsletters from FAIS HOLDING SOCIETE ANONYME for commercial communication regarding the products and services of the Group companies, so that you are informed about innovations, new arrivals, exclusive products, and offers.
2.6.4. Transfer to Legal Authorities in Case of, or in the Absence of, a Legal Order
The Company may transfer personal data to competent law enforcement, supervisory, judicial, or other public authorities only when required by the applicable legal framework or when necessary for the establishment, exercise, or defense of legal claims.
2.7. Transfer and Storage of Personal Data
The transfer of Personal Data between the onesalonica.com Website and your browser is encrypted and delivered via HTTPS.
Your data are stored on our servers located in a secure location.
2.8. Data Subject Rights, Access, and Deletion
The provision of your Personal Data constitutes a contractual obligation. You retain the free will and choice as to whether to provide us with your Personal Data; however, in the absence of the required data, it will not be possible for the Company to process your requests.
The Company executes the following processes of personal data exclusively in cases where the Data Subject has provided explicit consent:
Conducting marketing activities, surveys, and market research.
Analysis of browsing habits within the environment through the use of the Data Subject’s Profile, exclusively for the purpose of creating a better experience and personalizing it on our Website.
The provision of your Personal Data for such activities is entirely optional. You are free to provide or withhold your Personal Data for this purpose; however, in the absence of such data, the Company will not be able to perform marketing and advertising activities, surveys and market research, or any analysis of your browsing habits.
After verifying your identity, as Data Subjects you have the following rights:
Right to Information
The COMPANY is obliged to inform you about the processing of your data, including which data are being processed, for what purpose, and for how long they are retained, using clear and simple language.
Right of Access
You have the right to obtain from the COMPANY confirmation as to whether or not personal data concerning you are being processed and, if so, you have the right to access such data.
Right to Rectification
You have the right to request that the COMPANY corrects any inaccurate personal data concerning you and to complete any incomplete data.
Right to Erasure
You have the right to request that the COMPANY delete your personal data, which may be granted provided that certain conditions are met
Right to Restriction of Processing
You have the right to request from the COMPANY the restriction of processing, provided that certain conditions are met.
Right to Object
You have the right to object, at any time, to the processing of personal data concerning you. In such cases, the COMPANY must cease processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms as the Data Subject, or for the establishment, exercise, or defense of legal claims.
Right to Human Intervention in Automated Decision-Making
You have the right to request that the COMPANY not subject you, where applicable, to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.
Right to Data Portability
You have the right to request from the COMPANY to receive your personal data that you have provided in a structured, commonly used, and machine-readable format, or to have the COMPANY transmit it to another provider.
For processing carried out jointly with FAIS HOLDING SOCIETE ANONYME, you may exercise your rights against any of the joint controllers, in accordance with Article 26(3) GDPR.
To further facilitate the exercise of your rights, the COMPANY ensures the development of internal procedures to respond promptly and effectively to your requests.
At any time, you retain the right to be informed and/or to object to the further processing of your data in accordance with applicable Data Protection legislation. To exercise your rights, do not use social media platforms. To exercise the aforementioned rights or for matters concerning the processing of your personal data, please submit your request using the specially designed forms of our Company at any of our stores, or contact in writing the Company’s Data Protection Officer (DPO) by post or email using the following details: L. Poseidonos 77, Alimos, 17455, Attn: DPO, email: dpo@onesalonica.com, and for requests concerning joint processing, email: dpo@faisgroup.com.
If you believe that your Personal Data has been processed unlawfully, you may submit a request to one of the Supervisory Authorities competent for enforcing Data Protection Rules.
We respond to your requests free of charge and without undue delay, and in any case within one (1) month from the receipt of your request. However, if your request is complex or if there are numerous requests, we will inform you within the month if an extension of up to two (2) additional months is necessary, within which we will respond.
If your requests are obviously unfounded or undue, particularly due to their repetitive nature, the Company may charge a reasonable fee, taking into account administrative costs for providing the information or carrying out the requested action, or may refuse to act on the request.
This text may be amended over time; therefore, we encourage you to check its contents periodically.
2.9. Legal References and Useful Links
The processing of the Personal Data of users/customers of onesalonica.com is carried out by the Company, which also appoints a Data Protection Officer (DPO) established within the EU and is subject to the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), as well as the applicable European and Greek laws and regulations on the processing of personal data and the supervision of the competent Greek Supervisory Authority. For processing activities carried out jointly with FAIS HOLDING SOCIETE ANONYME, Article 26 GDPR on joint controllers shall additionally apply.
Last updated: 03/03/2026