What data we collect, how and for what purposes
In order to provide you with the opportunity to participate in the foodlovers’ reward card program, when you fill in the registration form, we collect your identification and contact details, in particular your name, surname, your place of residence, your e-mail, date of birth and telephone number, transaction data and history, registration date, signature, and gender. We also collect transactional data when you use your loyalty card to credit and redeem points and to provide privileges. In order for us to be able to register you in the foodlovers’ reward card program, it is necessary to provide us with your personal data, so if you do not wish to provide to us your personal data, we inform you that we will not be able to register you in the program. Furthermore, in order to maintain contact with you, we use your contact details to respond to your inquiries and requests or for marketing purposes and to promote our products, services and offers. Also, we process your personal data including transactional data and history in order to analyse and to understand you better and offer to you personalised offers and improve our products and services as well as for statistical research purposes. In our stores a closed-circuit television surveillance system is installed for customer and employee security purposes, prevention of criminal offenses and for the protection of our facilities and products. So, when you visit our stores, we collect footage of the closed video surveillance system. Occasionally, competitions are organized by our Company. In order to participate in a competition, whether it is in our stores, or it is on the internet or on social media, it is necessary to collect some personal data before you can participate in the competition. Therefore, when you participate in a competition, we collect identification and contact details such as your name, surname, email account and your phone number. In order to be able to participate in the competition, it is necessary to provide your personal information, thus in the case you do not wish to provide us with your personal data, we inform you that you will not be able to participate in it.

Why do we process your personal data and what are our legal bases
A processing is considered lawful only when there is a legal basis. In order to process your personal data, we use the following legal bases:
a. Performance of contract:

• Processes relating to the provision of services and privileges in the context of the registration, acquisition and management of the Foodhaus loyalty card program.
• Processes related to competitions.

b. Consent:

• We process your personal data for marketing purposes and for analyzing your consumer behavior, in order to better understand your needs and deliver products that meet your expectations.

c. Legitimate interests:

• The Closed-circuit television surveillance system works on the basis of the legitimate interests we seek. These legitimate interests are the security of you, our customers, our facilities, products and our employees.
• We perform direct marketing and advertising activities to promote and market our products and services based on our legitimate interest for direct marketing provided that you have not objected for the use of your data for this purpose
• We periodically conduct market research on the basis of our legitimate interests to improve our products and services.
• When a complaint is made, our legitimate interests are to handle your complaint and resolving the dispute.
• We run campaigns and we communicate on the basis of our legitimate interests to promote our products and services.
• We are conducting processes to manage and develop our business activities, including the improvement of our products and services based on our economic interests.
• We may process your data for the establishment, exercise or defence of legal claims, when applicable

Sharing your personal data
In order to be able to provide you with the best services, offers and products, we use specialized service providers, third parties, to whom we may transfer your personal data so that we can communicate with you or provide you with our services and / or products. Such third parties are considered as our processors which are only processing personal data in accordance with our strict instructions and they cannot do anything with your personal data without our instructions.  We only select providers who can ensure a high level of security and protection of our customers' personal data and we conclude contracts with them. For example, we use the platforms offered by Mailchimp and an SMS and text message platform provider so we can communicate with you, send you commercial communication, offers and other marketing material. We may proceed with transfers to third countries outside European Union. In such cases, we will proceed with the transfer only if the conditions set out in data protection laws are met, for example if there is an adequacy decision meaning that the third country ensures an adequate level of protection. In the absence of such decision we use appropriate safeguards such as binding contracts with third parties (standard data protection clauses). Currently, we only transfer personal data to  USA on the basis of the Standard Contractual Clauses as published by the European Commission. If you wish to obtain further information for the appropriate safeguards or the mechanisms, we use to transfer personal data to third countries please contact us at dpo@iph.com.cy.

Retention period of personal data
We only retain your personal data for as long as it is necessary to achieve the above purposes.

•  If you signed up as a member of the foodlovers’ reward card program, we will store your personal data for the duration of your remaining membership. However, if your loyalty card is inactive for 2 consecutive years, you will automatically be deleted from the foodlovers’ reward card program and your personal data will be deleted from our database securely.
• Your contact details that we use for commercial communication purposes will be processed until the day you withdraw your consent or until you object to the processing
• We will also process your personal data for the purpose of analyzing customer behavior either until you withdraw your consent or until you object to the processing
• The video footage we collect from the closed-circuit television surveillance system is maintained for a period of 2 months and then is destroyed

Security of processing of your personal data
Knowing our responsibility when processing your personal data, we implement appropriate policies, rules, and technical security measures to ensure a high level of security and protection of your personal data from unauthorized access, inappropriate use or disclosure, unauthorized modification, accidental loss, destruction or damage.

Cookies
We use cookies on our site and for this purpose we have created a Cookie Policy that you can see here.

Contact Information
If you have any questions about this Privacy Notice or you want to exercise your rights as outlined above or you wish to file a complaint, please contact us:
i. by sending e-mail to: foodhaus@foodhaus.com
ii. or calling us at 7000 3663 (office hours)
iii. or by completing the relevant form that you will find in our stores.
You can also contact our Data Protection Officer directly at dpo@iph.com.cy.
If you do not receive a satisfactory response from us or in any case you can immediately file your complaint with the Data Protection Commissioner using the following link http://www.dataprotection.gov.cy.