Privacy policy

The protection of your Personal Data is important to us!

Please offer some time to read this Privacy Policy and find out how FINLOUP S.A., a company incorporated and registered in Greece under GEMI number 155954101000, with registered office at 190 Andrea Siggrou Avenue, 2nd Floor, Athens, Greece, 17671, with tax identification number 801397730, e-mail address team@finloup.com (hereinafter the "Finloup" or "we" or "us"), acting as joint Data Controller with the Merchant, collects, stores, uses and generally processes your Personal Data when you visit or use Finloup's Platform.

This Privacy Policy also describes how we use, disclose and protect your Personal Data, the options you have regarding your Personal Data, and how you can contact us. For questions regarding this Privacy Policy, but also any issues related to the processing of your Personal Data and the exercise of your rights, you can contact the e-mail address (email) dpo@finloup.com.

The following definitions are used in this document:

AISP: the licensed Account Information Service Provider employed by Finloup to retrieve and collect your banking data, subject to your prior consent.

Instalment Plan: the instalment plan agreement entered into between the Merchant and you that has been facilitated by our Platform.

Instalment(s): all subsequent individual instalments repaid to the Merchant by you as part of the Instalment Plan.

Merchant: any legal person selling goods or services to you through its e-shop using our Platform as a payment option.

Platform or Finloup’s Platform: means app.finloup.com.

Suggested Instalment Plan: the personalized instalment plan suggestion that has been derived by our Platform’s analysis and proposed to you.

Transaction: each individual sale of goods and services conducted through the Platform and with an Instalment Plan between the Merchant and you.

  1. A few words about Finloup’s Platform

Finloup develops and distributes the Platform, allowing Merchants and its customers the possibility of deferring payments, via Ιnstalments, by proceeding on behalf of the Merchant to the assessment of the eligibility of its customers and by facilitating the conclusion of an Instalment Plan entered into between the Merchant and its customer. 

  1. What is Personal Data?

‘Personal Data’ means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  1. What is processing of Personal Data?

‘Processing of Personal Data’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  1. Is it mandatory to provide your Personal Data?

The provision of your Personal Data to us is necessary to achieve the purposes set out in this Privacy Policy and our Platform’s Terms & Conditions available at https://finloup.com/en/pages/terms-conditions_leasing and https://finloup.com/en/pages/terms-conditions_bnpl

If you refuse to provide the required information, it will be impossible to achieve the main purpose of collecting the Personal Data, and it will make it impossible for us to fulfill the purposes set out in this Privacy Policy and our Platform’s Terms & Conditions available at https://finloup.com/en/pages/terms-conditions_leasing and https://finloup.com/en/pages/terms-conditions_bnpl

  1. What Personal Data do we collect from you?

We collect only the absolutely necessary Personal Data, which are appropriate and clear for the intended purpose. This Personal Data includes the following:

Full name (first name, last name, father’s name)

Email address

Mobile phone number

Date of birth

Profession/Salary income

Home address

Delivery address

Billing address

Delivery method (carrier used)

Banking data, specifically information related to your bank products (accounts and cards), such as IBAN, masked card number (i.e. only the last 4 digits), type of account, product holder name, balances, transaction history, ID number of holder.

Content of your shopping cart

Your purchase history with the Merchant

  1. How we collect and process your Personal Data?
  2. a)            Merchant provides us with certain information regarding your personal details (i.e. name, surname, full address for billing and shipping the product, mobile phone number, e-mail address, information on whether you are a registered user with the Merchant or a guest buyer) and purchase-specific data (i.e. products in basket, value per product, shipping costs).
  3. b)            We employ an AISP in order to retrieve and collect the information arising from your banking data (see clause 5 above). The banking data we will be able to retrieve via our AISP partner is subject to your prior authorization during our Platform’s procedure for the assessment of your eligibility to conduct a Transaction with an Instalment Plan. If you do not authorize access to your banking data we will not be able to conclude the eligibility assessment and we will not be able to offer you a Suggested Instalment Plan.
  4. c)            During our Platform’s procedure for the assessment of your eligibility, you may be asked to complete a short questionnaire.
  5. Why we collect and process your Personal Data?
  6. a)            To proceed with the assessment of your eligibility to conduct a Transaction with an Instalment Plan.
  7. b)            For our Platform to analyze your Personal Data provided and conclude an outcome on whether you are eligible for a Transaction with an Instalment Plan and, in a positive answer, under what terms.
  8. c)            To display to you the Suggested Instalment Plan.
  9. d)            To facilitate the Instalment Plan entered into between you and the Merchant and the payment of the first (1st) Instalment at the day of your purchase via debit or credit card, using the services of our partner payments servicer.
  10. e)            To allow our partner payments servicer store your payment card so as to automatically retrieve the upcoming Instalments or to offer you the ability to pay the Instalments via direct debit, using the services of our partner payments servicer.
  11. f)             To send you notifications via – among others - email, SMS, mail or call your mobile phone on behalf of the Merchant.
  12. g)            To provide Merchants with information regarding the status of your Instalment Plan;
  13. h)            To comply with our contractual or legal obligations to exchange Personal Data with law enforcement.
  14. i)             To send you communications required by law or necessary to inform you of changes in the services we provide. For example, updates on this Privacy Policy, and legally required information about your Transactions. These communications will not contain promotional content and do not require prior consent when sent by email or text message (SMS). If we do not use your Personal Data for these purposes, we will not be able to comply with our legal obligations.
  15. j)             For research purposes, promotional purposes, sending of newsletters.
  16. k)            Sending newsletters/offers: With your consent, we will use your Personal Data, preferences and transaction details to inform you via e-mail, internet, telephone and /or social media about related products and services, including personalized offers, discounts, etc. Of course, you have the option to revoke this consent at any time.
  17. Who are the recipients of your Data - How is your Data communicated?

Only the absolutely necessary staff of the Finloup and the staff of the Merchant has access to your Personal Data.

  1. Personal Data Disclosure to third parties

We may transfer your personal data to third parties such as, for example, sub-contractors (including our IT support service provider), other counsel and accountants, as well as third parties involved in your matters.  We ensure that sharing your Personal Data with third parties is done in accordance with applicable legislation concerning data protection, and we ensure where applicable that third parties adopt all appropriate safeguards to protect your personal data.

  1. We strive to ensure your Personal Data is secure

We understand the importance of protecting your privacy and we will ensure your Personal Data is safeguarded and held securely in accordance with our obligations under the applicable legislation. Appropriate technical and organizational measures have been implemented to ensure personal information is protected and to prevent your Personal Data from being lost, used, accessed in an unauthorized way, altered or disclosed. We also limit access to your personal information to those employees, contractors and other third parties who have a business need to know. This access will be granted on a confidential basis and processing of the information will only take place subject to our instructions.

We also share your Personal Data with third party service providers, that process your Personal Data as Data Processors on our behalf and in accordance with our orders.

Finloup shares your Personal Data with third party service providers that process personal data on behalf of the Finloup, for example (indicatively mentioned) for debit card processing and payments, email distribution, research and analysis. When we use third party service providers we enter into agreements that oblige them to implement appropriate technical and organizational measures to protect your Personal Data. We may also share your Personal Data to other third parties, subject to your prior consent.

  1. How do we ensure that the Data Processors respect your Personal Data?
  • We provide only the information needed to perform their specific services.
  • They may use your Personal Data only for the exact purposes set forth in our agreement with them.
  • We work closely with them to ensure that your privacy is respected and protected at all times.
  • If we stop using their services, any of the Personal Data they hold will be deleted or made anonymous.
  • The Data Processors have agreed contractually with Finloup:

-              to ensure confidentiality,

-              to not send your Personal Data to third parties without the permission of Finloup,

-              to take appropriate security measures,

-              to comply with the legal framework for the protection of Personal Data and in particular Regulation 679/2016 /EU.

  1. How long do we keep your Data?

We retain your Personal Data for as long as necessary to fulfill the purposes set forth in this Privacy Policy (unless a longer retention period is required by applicable law). Regarding your Personal Data related to product purchases, we retain this data for a longer period of time in order to comply with our legal obligations and rights (commercial law disputes, guarantee etc.). At the end of this retention period, your Personal Data will be deleted completely or anonymously, for example by aggregation with other data, so that they can be used in an unrecognizable way for statistical analysis and business planning.

  1. Your rights:
  2. a)            Access your information.

You are entitled to request access to the information we hold about you (known as a ‘data subject access request’). You are entitled to receive a copy of the personal information we hold about you and to check that it is being lawfully processed.

  1. b)            Correct your information.

If the information we hold for you is incomplete or incorrect, you have the right to request a correction.

  1. c)            Request erasure.

Where there are no reasons for continuing the processing of your personal information, you are able to request the removal or deletion of the personal information.

  1. d)            Object to processing.

Where the firm relies on legitimate interest for the processing of your personal information, or for the purposes of direct marketing, you have the right to object to the processing.

  1. e)            Request the restriction of processing.

You are entitled to request for a suspension for the processing of your personal information, for example, if you are awaiting the reasons for the processing of the information or require us to establish its accuracy.

  1. f)             Right to data portability.

You are able to request the transfer of your personal information to another service provider.

If you wish to exercise any of the aforementioned rights, you can contact us at: dpo@finloup.com.

Finally, you can also lodge a complaint about the processing of your personal data with the Hellenic Authority for the Protection of Personal Data.

  1. Cookies Policy

What is a Cookie? "Cookies" are small text files, which are stored in the browser of the user when visiting a website, app or platform. The information stored on the user's computer may contain information such as which pages the user has visited, the date and time of the visit as well as a random and unique user ID. Cookies do not contain personal information or information, which will allow anyone to communicate with the visitor of the website, app or platform, by phone, e-mail, etc. In addition, using Cookies does not access your computer documents or files.

With the use of Cookies, the Platform is able to store useful information for the user's browsing, as well as to read this information in order to offer the user a unified browsing experience.

In addition, Cookies help us test the performance and traffic of our Platform, improving its presentation and content, according to the preferences of our visitors.

What type of Cookies are there? We use Cookies on our Platform to manage the performance and traffic of our Platform, to provide personalized websites and to customize advertising and other content to reflect your particular needs and interests. Cookies can also be used to compile anonymous, aggregate statistics that allow us to understand how the public uses our Platform and help us improve its structure and content. We cannot verify your personal identity from this information. You can modify your browser settings to reject some or all Cookies, except the absolutely necessary ones. Note that some features are only available through the use of Cookies, and if you choose to decline Cookies, these features may not be available.

Cookies can be classified as follows, depending on the purpose:

  1. Strictly necessary Cookies (technical): The necessary, otherwise, strictly necessary Cookies, are essential for the proper functioning of our Platform, allow you to browse and use their functions. These Cookies do not recognize your personal identity. Without these Cookies, we cannot offer effective operation of our Platform.
  2. Functionality or customization Cookies: These Cookies allow the Platform to remember the user's choices such as language or region to provide enhanced and personalized features. They can also be used to provide user-requested services, such as video viewing or social media use. The information collected by these Cookies may be anonymous and it is not possible to track browsing activity on other websites. If you do not accept these Cookies, the performance and functionality of the Platform may be affected and your access to its content may be limited.
  3. Analysis Cookies: These Cookies collect information about how visitors use our Platform, for example, which pages they visit most often and whether they receive error messages. These Cookies collect aggregate, anonymous information that does not identify a visitor. They are used exclusively to improve the performance of the Platform.
  4. Behavioral advertising Cookies: These Cookies are used to provide content that best suits you and your interests. They can be used to send targeted advertising/offers, limit advertising promotions, or measure the effectiveness of an advertising campaign. These Cookies can be used to remember the websites you have visited to determine which online marketing channels are most effective and allow us to reward external websites and affiliates who have referred you to us.
  5. Unclassified Cookies: Unclassified Cookies are Cookies that are in the process of being classified, together with the providers of individual Cookies.

How can I manage my Cookies?

More information on the general use of Cookies, as well as the methods of excluding or restricting them, can be found at //cookiepedia.co.uk/all-about-cookies and //www.allaboutcookies.org/.

In case you wish to enable or disable the use of Cookies from the browser settings, you can visit the following websites and be informed about the necessary actions you need to take.

  • Internet Explorer //support.microsoft.com/kb/278835
  • Firefox //support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
  • Chrome //support.google.com/accounts/answer/61416?hl=en
  • Safari //support.apple.com/kb/PH5042
  • Safari for iPad and iPhone //support.apple.com/kb/HT1677
  1. What is the applicable law during the processing of your Data by us?

Applicable law is the Greek Law, as formulated according to the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.

The competent courts for any emerging disputes related to your Data are the Courts of Athens.

  1. Which is the competent authority for submitting a complaint?

You have the right to submit a complaint to the Hellenic Authority for the Protection of Personal Data (postal address 1-3 Kifissias, PC 115 23, Athens, tel. 210. 6475600, e-mail address contact@dpa.gr), if you consider that the processing of your Personal Data violates the applicable national and regulatory framework law for the protection of personal data.

  1. Questions and Comments?

We hope this Privacy Policy has helped you understand how we use your Personal Data.

If you have any questions or comments and concerns about our Privacy Policy please contact us, we will be happy to help.