ERMES Privacy Policy

Ermes Department Stores Plc (hereinafter “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect and use your personal information solely for the purpose of sending you newsletters and/or SMS communications regarding promotional offers and updates for selected stores.

This Privacy Policy applies only to individuals who voluntarily subscribe to receive marketing communications (newsletters and/or SMS) about stores that are no longer part of the Unique by Ermes rewards program. By subscribing through the dedicated link, you agree to the terms described in this policy.

Who we are

Ermes Department Stores Plc is based in Cyprus, listed on the Cyprus Stock Exchange under registration number HE129279 having its registered office at 200 Limassol Avenue, Strovolos 2025, Nicosia, Cyprus.

If you have any questions or comments about our privacy practices or wish to contact us for any reason, please feel free to email us through our Data Protection Officer at dpo@ctcgroup.com.

What is personal data?

Personal data is information that may identify you directly or indirectly. Indirectly means in conjunction with other information, such as your name, postal address, email address, phone number.

Information that this policy applies to

This Privacy Policy applies to information we collect through:

• E-mail, text, and other communications.
• Interaction with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Privacy Policy.

We will not disclose your information to third parties, except where it is part of providing a service to you. We will only otherwise disclose your information where we have your express permission or we are obliged by the law to do so.

Purpose of processing personal data

We collect and process your personal data solely for the purpose of sending you newsletters via emails, exclusive offers, and marketing-related communications. Via SMS or email.

We do not use your personal data for any other purposes, including profiling, analytics, or third-party advertising.

The processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679) and the applicable Cypriot legislation on the protection of personal data.

Legal bases for collection, use and disclosure of your Personal Information

We rely solely on your explicit consent to collect and use your personal data for marketing purposes, including newsletters and offers.

You may withdraw your consent at any time by clicking the “unsubscribe” link found in any email you receive from us or by contacting us directly at dpo@ctcgroup.com.

We do not process your data based on legitimate interests, contracts, or legal obligation for any other purpose.

Information that we collect and how

We may collect the following information when you subscribe to receive newsletters or promotional offers:

• First and last name
• Email address
• Contact number
• Address
• Preferred communication language

We do not collect sensitive personal data or track your browsing behavior beyond what is technically necessary for delivering emails.

Processing of Sensitive Data

In some cases, we may process specific categories of personal data about you (“sensitive data”) as described in the policy above.

Recipients of your Personal Information

We may share your personal information with our agents, contractors, or service providers solely for the purpose of delivering newsletters, promotional emails, and/or SMS messages...

How we protect the security of your Personal Information

We take appropriate security measures (including physical, electronic, and procedural measures) to safeguard your Personal Information from unauthorized access and disclosure...

Personal data retention

We retain personal data as long as necessary for the purposes collected or for legal reasons...

Your rights related to your Personal Information

You have rights under the GDPR, including the rights of access, rectification, erasure, portability, objection, and restriction...

Right to lodge a complaint

If you have concerns, you can contact our Data Protection Officer or the Cyprus data protection authority via their website: www.dataprotection.gov.cy.

Transfer of Business

In the event of a business transfer, we may share personal data in accordance with data protection law.

Changes to this Privacy Policy

We may modify this policy from time to time. You are expected to review it periodically. By continuing to use our services, you agree to the updated policy.

No Error Free Performance

We do not guarantee error-free performance. However, we commit to correcting any policy compliance issues we discover promptly.

Contacting us

If you have questions or requests about your data, email our Data Protection Officer at dpo@ctcgroup.com.