Controller Information:

The Controller shall be the company under the name “KORRES SOCIETE ANONYME - NATURAL PRODUCTS” (distinctive title: “KORRES S.A.”), based in Metamorfosi, Attica (3 Drosini Street & Tatoiou Str., P.C. 14452) with General Electronic Commercial Registry 085349902000. For any issue relating to you, regarding the retention and processing of your data, you can contact us via email: privacy@korres.com.

Everything you need to know about us and your data and the terms of use of our Website and Application are listed below.

DATA collected by us

- When you register as a user on our website or install our application, we may ask you to provide us with some information about you. This information may include personal information, such as first name, surname and e-mail address. In some cases, within the context and for the purposes of providing you our services and interacting with you in the context of providing our services and purchasing KORRES products, you may provide us with further information, such us a telephone number and other information, such as sex, age, address, information about any problems you have experienced with our products, your skin type and condition.

- During your navigation on our website, IP address and Cookies data may be included in the abovementioned data. (For more information about the use of cookies on our website, please refer to our company's Cookies Policy (https://gr.korres.com/pages/cookies-policy).

- When you apply for employment at KORRES, we collect your identification data (e.g., name, surname) and contact details (e.g., email, telephone, home address), information about your education and previous employment, as well as any further information you submit along with your resume.

- Furthermore, regarding your subscription to KORRES Exclusive Newsletter, we may process data regarding your consumer habits, if you choose to provide them to us.

WHEN WE ASK FOR YOUR PERSONAL INFORMATION

- When you register as a user through our website or application in the points collection reward program and/or make a purchase.

- When you fill out the KORRES Circle partner Form and request that we contact you.

- When you register as a point of sale through our website or application, and make sales as our associate.

- When you request to receive newsletters or information/promotional information via messaging services (e.g., SMS, Viber).

- When you submit questions or requests about our services.

- When you wish to file a complaint or report a problem you face, relating to one of our products.

- When you participate in one of our competitions.

- When you send us your curriculum vitae for the recruitment of staff.

PURPOSE AND DURATION OF DATA COLLECTION AND PROCESSING

Your personal data shall be collected by us and used:

- to provide services of the platform for collecting points of purchases of our products and selling them through pharmacies/stores;
- to participate to KORRES Circle point collection reward program;
- for promotional activities and promotion of our services and products, as long as you have consented to be contacted by us. Specifically, we will only contact you via email, telephone, SMS, other available messaging service for our services, competitions, offers, discounts or events;
- For commercial purposes, in the context of displaying personalized advertisements related to your consumer preferences when you visit search engines, websites, and applications, for example, on social media platforms.
- to reply to questions, requests and complaints about our products or our company;
- to contact you in case you notify us of an adverse reaction to one of our products and to ensure the quality of our products and our compliance with the existing legislative framework governing the manufacturing and marketing of cosmetic products; and
- to hire the necessary staff for the operation of our company.

Your data shall be stored and retained, as applicable, for as long as is permitted in accordance with the applicable legislation, for the purpose of collection and processing it, namely the personal data of registered users shall be retained for as long as they maintain their account, and for an additional period of six (6) months, for promotional purposes, or for participation in a specific promotional activity, for as long as you have consented to retain your data, and until its completion, for recruitment purposes for two years, and, in any case, your data shall be deleted when the purpose of their collection expires, unless a longer retention period is required to comply with applicable law, e.g. for tax, commercial or product security reasons.

LEGAL BASIS FOR PROCESSING

The data collected by our company is processed for various legitimate reasons, as applicable, including in the context of the performance of a contract between us or at its conclusion stage and in order to fulfill it, in the context of fulfilling the Company’s legal obligations, arising from the existing legislation (e.g. tax provisions, commercial law, e-commerce legislation), the legal interest of “KORRES S.A.” for reasons of operation of our business ( such as ensuring the safety of our products and/or displaying targeted advertisements), or with your consent, where required (e.g. to receive newsletters, for the use of cookies in accordance with the Cookies Policy (e.g. targeting cookies (third – party cookies), performance cookies), for displaying personalized advertisements when you visit search engines, websites, and apps, e.g., on social media platforms).

If the processing of your data is based exclusively on your consent, you may withdraw your consent at any time and henceforth; however, this may affect the provision of services on our part and make it impossible to continue.

YOUR RIGHTS

In accordance with the GDPR and applicable national legislation on the protection of natural persons with regard to the processing of personal data, you have the following rights:

A. Right to access and to information: you have the right to be informed by us about which of your data we have collected, for what purpose, for how long we intend to retain it and to whom we could transfer it, especially when it comes to third countries.
B. Right to rectification (correction): you can ask us to correct or complete incorrect or incomplete information that we keep for you.
C. Right to restrict and to object to processing; you can ask us to restrict or to stop processing your personal data if you believe that the information we have collected and retain is inaccurate, or if you no longer wish to receive informative and advertising messages about our products, including direct marketing and targeted advertising messages.
D. Right to data portability: you can request to receive a copy of your data that we retain and/or have it transmitted to another controller for you.
E. Right to erasure: you can request us to delete the personal data, namely data and information that we retain, if you wish to withdraw your consent for their retention and processing by us, according to the above, and, of course, if your data is unlawfully processed, in violation of the Personal Data Protection Regulation.

If you wish to exercise your rights, please contact us via email at privacy@korres.com
KORRES will make every effort to respond to your requests without delay and in any case within one (1) month of receiving a request. This deadline may be extended, if necessary, due to the complexity or number of requests, for two (2) additional months, in which case you will be informed of such extension as well as for the reasons for such an extension, within one month of receiving the request.
If you believe that we have not responded to your requests, you always have the right to contact the Personal Data Protection Authority (www.dpa.gr).

SECURITY MEASURES – DATA COMMUNICATION

You should be aware that the data we collect is stored on a secure server, protected by a password and a firewall. KORRES S.A. implements policies and technical measures aimed at ensuring, to the extent possible, the security and integrity of all information, including your personal data.

As a rule, we do not transfer your personal data that we collect in the abovementioned ways to third parties, within or outside the European Union; however, if transfer is required to ensure the purpose of the processing and our legitimate interest or in the context of exercising our legal obligations, your personal data will continue to be subject to appropriate safeguards provided by law, and we will primarily ensure that they are protected, as they would be within the EU.

The following categories of recipients may have access to your data, as applicable, in order to provide their services requested by you or required by law: cooperating courier companies, online transactions and online services providers, electronic payment clearings, recruitment service providers, other categories of partners as processors on behalf of the company. The company will share your personal data, if the law so requires, to competent police, independent, administrative, judicial authorities.

In addition, we may share your personal data (e.g., email) with search engines and social media platforms, of which you are a member, for targeted advertising purposes: as mentioned above in section "PURPOSE AND DURATION OF DATA COLLECTION AND PROCESSING," we may share the personal data you have provided to us with social media platforms (e.g., META) and search engines (e.g., Google) in order to display personalized advertisements for our products and services on these websites. In this context, these websites and KORRES S.A. act as joint Data Controllers. For more information on how these websites process your personal data and how to exercise your rights in relation to any further processing of your data, please consult their respective privacy policies.

Your data, as registered users in the points and purchases collection reward program, will be processed by our company with the cooperating points of sale of your choice, as Joint Controllers, for which processing this Privacy Policy shall be jointly implemented. The full details of the cooperating physical stores points of sale of your choice, shall be notified to you at the time of this selection, and at any time you make a transaction with the physical store, and, in any case, you can find them here.

In any case of sharing your personal data with the above recipients, specific contractual clauses for the protection of personal data shall be applied, so that your personal data continue to be subject to appropriate safeguards, provided by this Privacy Policy and the existing legislation.

Along with other commercial organizations we shall collect data in order to monitor the use of this Website or the Application. During this process we shall NOT collect identifiable personal data. We shall collect information exclusively about the number of visitors and the Internet service provider. This information shall be used to understand the use of the website and may be shared with other companies or other third parties.

PRIVACY POLICY VALIDITY

This privacy policy sets out the principles governing the use of all personal data collected. Anyone who uses this website or provides his/her data agrees to this use. Users are requested to read this privacy policy carefully. Any dispute that may arise with the privacy policy will be subject to this policy, the information and updates on the protection of natural persons in relation to the processing of personal data that is included on this website or application.

The privacy policy may change from time to time. Therefore, we ask the users of our website to check it regularly to ensure that they are up to date and aware of the most recent version which will apply on each visit to the website. If we consider that a revision is important, the users registered on the services of the website will be notified via e-mail, using the address declared by them. In any case, the use of this website constitutes an acceptance of this Policy, and users shall be bound by its terms.

CHILDREN

This Website, as well as the
respective application, are addressed to adults seeking information about
“KORRES S.A.”. Our company shall not collect, nor intend to collect information
from or about children under the age of 16.

Last update 2025.