Privacy Policy of the mySUPERHOME app.

 

Last revised: October, 2025

 

1.      INTRODUCTION

 

Welcome to the mySUPERHOME (the Application ), published published by Superhome Center (DIY) Limited (HE94973), Filippou 10, Industrial Zone, 2540, Nicosia Cyprus ( the Company ), and powered by CRM.COM Software Ltd. By installing, registering or using the Application, you agree to this Privacy Policy and the Terms and Conditions.

 

This privacy policy describes our policies and procedures on the collection, use and disclosure of your information when you use the Application. The Company follows and conforms to the EU General Data Protection Regulation (GDPR) and other international regulations on data protection.

 

We use your personal data to provide and improve the Application and the Cashback Plan. By using the Application, you agree to the collection and use of information in accordance with this Privacy Policy. 

 

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy.

 

2.      DEFINITIONS

 

2.1.  Account means a Member s account within the Application.

2.2.  Application means the mySUPERHOME App available on iOS and Android.

2.3.  B2B Customers means customers which receive a discount for Purchases made from the Company and designated as Superhome PRO.

2.4.  Cashback Credit means credit redeemable only for purchases from the Company and which is earned by a Member through purchases with cash or cash equivalent (excluding Cashback Credit) and calculated in accordance with Schedule 2, under these Terms.

2.5.  Cashback Credit Conversion Rate means the rate of conversion applied for purchases from the Company with cash or cash equivalent (excluding Cashback Credit) by a Member, in accordance with the tier of the Member as per Schedule 2.

2.6.  Cash Back Plan means the Company s loyalty program operated via the Application.

2.7.  Member means a registered user of the Cash Back Plan.

2.8.  Purchase means purchase from any Superhome Center store or online.

2.9.  Rewards means Units or Cashback Credit or any other type of reward which may be offered by the Company from time to time to Members or Users.

2.10.                   Terms means the terms and conditions including the Privacy Policy.

2.11.                   Units are points earned by a Member through purchases with cash or cash equivalent (excluding Cashback Credit) and calculated in accordance with Schedule 2, under the Terms

2.12.                   Users means Members as well as any other person who may use the Application.

 

3.      BECOMING A MEMBER OF THE CASHBACK PLAN

 

3.1.  Any person complying with the Terms and Conditions may apply to the Company through the Application, in order to become a Member of the Cashback Plan. The Company will examine the application and decide whether or not the person may become a Member or whether any further action should be taken.

 

3.2.  No special categories of personal data under Article 9 of Regulation (EU) 2016/679 are required for the purpose of handling an application.

 

3.3.  The Company handles applications by applicants in a consistent way and in line with Regulation (EU) 2016/679

 

 

4.      IDENTITY OF THE DATA CONTROLLER AND DATA PROCESSOR

 

The Company is the Data Controller of the personal data processed for the purposes of the Application and the Cashback Plan. CRM.COM Software Ltd is the main Data Processor of the personal data processed for the purposes of the Application and the Cashback Plan.

 

5.      PROCESSING OF PERSONAL DATA

5.1.  CREATING AN ACCOUNT

 

In order to process a user s application to create an Account, you will be required to submit to us and we will need to collect and process the following minimum information:

 

        Name and Surname

        Email address

        Telephone Number

        Password

 

 

5.2.  CONTACTING THE COMPANY USING THE APPLICATION CONTACT US FEATURE

 

In order to process your communication/enquiry and in order to be able to respond to you, when contacting us through this feature, you will be required to submit to us and we will need to collect and process the following minimum information:

 

        Name and Surname

        Email address

        Your message

 

 

 

5.3.  USING THE ACCOUNT

 

In order to facilitate the use of the Account and the participation of the Member to the Cashback Plan when making purchases at one of our stores or through our online store or through the Application, we will need to collect and process the following minimum information:

 

 

        Username

        Name and Surname

        Email address

        Name of store/online store

        Products purchased

        Amount paid

        Payment method

        Cash Back earned

        Cash Back redeemed

        Cash Back balance

        Date and time of transaction

        Telephone Number

 

 

5.4.  OFFERS AND GIFTS

 

If you have provided your explicit consent either though the Application or your device settings, to receive promotional offers and/or additional Cash Back in the form of gifts by the Company, by sms and/or email and/or push notifications on your device, then the Company may send you such Offers and/or Gifts subject to the Terms and Conditions. In such a case, and for the above purpose, we will need to process the following information:

 

        Username

        Name and Surname

        Email address

        Date of birth

        Telephone Number

        Purchases History

 

6.      GROUNDS FOR LAWFUL PROCESSING

 

6.1.  Personal data are processed for the performance of a contract to which the data subject is a party or will become a party as Member of the Cashback Plan. The processing takes place in accordance with Article 6(b) of Regulation (EU) 2016/679.

6.2.  The processing of personal data for the purpose of sending marketing communications is based on your explicit consent in accordance with Article 6(1)(a) of Regulation (EU) 2016/679.

 

6.3.  The purpose of collecting and handling an application of interest to become a Member of the Cashback Plan, including personal data/information contained therein, is to enable the Company to be able to communicate with the applicant, and/or allow the applicant to become a user of the application and/or be able to provide to him/her as Member with full functionality of the Application.

 

 

7.      PROFILING

 

Your personal data will not be used for any automated decision-making including profiling. In some offers we send (such as offers specific on your birthdate) we may analyze your purchase history to better understand your preferences and provide you with personalized offers or discounts. This type of processing is considered profiling under GDPR. However, it does not produce legal effects or similarly significant impacts on you.

 

 

8.      RETENTION OF PERSONAL DATA

 

8.1.  We will only retain a user s personal data only for as long as it is necessary for the purposes set out in this Privacy Policy and for as long as the user remains a member of the Cashback Plan, to enable us to facilitate the Member s account and enable the Member to participate in and benefit from the Cashback Plan and to provide the Application s functions to the Member. In the event of deletion/deactivation of the Account, such data will be permanently deleted from our records within 6 years from the last purchase with Cash Back.

 

8.2.  Any data as to remaining Cash Back and/or Units will be deleted automatically 12 months after the purchase which resulted in the accumulation of Cash Back and/or Units.

 

8.3.  The data maybe retained for a larger period of time, to the extent it is necessary to comply with our legal obligations (for example, if we are required to retain the data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

 

8.4.  The Company may also retain anonymised data for internal analysis purposes and to strengthen the security or to improve the functionality of the Application and the Cashback Plan.

 

9.      ACCESS TO DATA BY THIRD PARTIES

 

9.1.  CRM.COM Software Ltd, as the main Data Processor of the personal data processed for the purposes of the Application and the Cashback Plan, may obtain temporary access to systems where data is stored, during the provision of their services. This Data Processor is under strict contractual obligations of confidentiality and protection of data processed during the provision of their services.

 

9.2.  If you have provided your explicit consent to receive promotional offers and/or additional Cash Back in the form of gifts by the Company, by sms and/or email, we may send these to you via our third-party service providers for email and/or sms. For this purpose, we will share limited data with such service providers, such as your email address and/or telephone number.

 

9.3.  If in the future we change or add a third-party service provider, we will update this Privacy Policy and we will notify you accordingly.

 

9.4.  When making a purchase, we allow registered partners to access our back-end system and accept your purchase or your wallet payment. In such partners, the only data you will provide as input is your identification data.

 

9.5.  If the Company is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will provide notice if the transfer becomes subject to a different Privacy Policy.

 

9.6.  Under certain circumstances, the Company may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

 

9.7.  The data is not accessible to the general public.

 

10. PERSONS UNDER THE AGE OF 18

 

The Application and the Cashback Plan are addressed to persons over the age of 18 as per the Terms and is not designed nor intended to collect personal data of persons under the age of 18. Persons under the age of 18 should not provide any personal data on the Application. If we become aware that we have collected personal data of a person under the age of 18, we will take steps to remove the data and deactivate the Account.

 

 

11. DATA SECURITY

 

11.1.                   The data processed for the purposes of the Application and the Cashback Plan, is stored on the Company s local servers located in the Republic of Cyprus and/or on cloud storage within the European Union.

 

11.2.                   In order to protect the data being processed, the Company has put in place a number of technical and organisational measures. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by both the processing itself and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.

 

11.3.                   Data security is important to us, however it is important to note whilst we strive to use commercially acceptable means to protect the data, due to the nature of data transmissions over the Internet and electronic data storage, we cannot guarantee its absolute security. Users of the Application and Members of the Cashback Plan are urged to take their own additional protective measures, to secure their access credentials and protect their device from external threats, such as hacking, viruses, malware or spyware.

 

12. YOUR RIGHTS UNDER THIS PRIVACY POLICY AND THE LEGISLATION

 

12.1.                   If you submit or have already submitted to us, personal data about you through the Application, then you have the following rights under this Privacy Policy and the relevant legislation on the protection on personal data:

 

12.1.1.You may at any time cancel the consent you have given us to process your personal data.

 

12.1.2.You have a right to lodge a complaint with the supervisory authority, The Office of the Commissioner for the protection of personal data, however we would appreciate the chance to deal with your concerns before you approach the supervisory authority.

 

12.1.3.You may at any time submit to us any of the following requests:

 

12.1.3.1.      A request for us to permanently delete all or some of your personal data from our records.

12.1.3.2.      A request for you to access your personal data which are in our records and a request for us to provide you with a copy of your personal data which are in our records, in digital or hard copy form.

12.1.3.3.      A request for us to update or correct your personal data which are in our records.

12.1.3.4.      A request for us to forward to another party of your choosing, a copy of all or some of your personal data that are in our records.

12.1.3.5.      A request for us to limit what we do with your personal data or to stop all processing of your personal data.

 

12.2.                   If you wish to exercise any of the above rights or if you require information with regard to issues related to the processing of your personal data by the Company, you will be able to do so by using the Contact Us feature on the Application or by contacting us at any of the following:

 

Address: 10 Philipou Str., Industrial zone, Dali, 2540, Nicosia, Cyprus

Tel: +357 22205444

Fax: +357 22205434

Email: mysuperhome@superhome.com.cy

 

12.3.                   Please keep in mind that if you withdraw your consent, or if you make a request for us to permanently delete all personal data from our records, or if you make a request for us to stop all processing of your personal data, or if you make a request for us to limit what we do with your personal data, in a way that we are no longer in a position to effectively facilitate your Account, then we will treat such a request as a request to deactivate your account and delete all information related to your account (personal and non-personal data). Before doing so, we will notify you in order to give you an opportunity to request a copy of your information before deactivating your account and before deleting all information.

12.4.                   Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

 

12.5.                   You can also contact the Company s Data Protection Officer at the following email address: dataprotection@dhadjinestoros.com, with regard to issues related to the processing of your personal data by the Company.

 

12.6.                   The supervisory authority in Cyprus for the enforcement of personal data protection legislation is:

 

The Office of the Commissioner for the protection of personal data

Address: Kypranoros 15, Nicosia 1061 ,

Postal address: P.O.Box 23378, 1682 Nicosia, Cyprus

Tel: +357 22818456

Fax: +357 22304565

Email: commissioner@dataprotection.gov.cy

 

 

 

COOKIES AND TRACKING TECHNOLOGIES FOR THE mySUPERHOME CASHBACK PLAN

 

The Application and/or the Company s website may use cookies and similar tracking technologies to enhance your experience, analyse usage, and support the operation of the Rewards Plan.

 

What Are Cookies

Cookies are small text files placed on your device when you visit or use a website or application. They help the Application remember your preferences and understand how you interact with our content.

 

Types of Cookies We Use

The following categories of cookies may be used in the Application and/or website:

 

Type of Cookie

Purpose

Cookies we use

Retention Period

Strictly Necessary Cookies

Required for the Application to function properly and enable core features such as login and security.

Session only

 

Legal Basis for Use of Cookies

 

You will be asked to provide your consent through a cookie banner or settings panel before any non-essential cookies are placed on your device. You may withdraw your consent at any time by changing your cookie settings.

 

Managing Cookies

You can manage or delete cookies through your browser or device settings. However, if you choose to block or delete certain cookies, some features of the Application may not function properly.

 

For more information about cookies and how to manage them, visit www.allaboutcookies.org