The privacy of our customers' personal data and its protection is of primary importance to us. We want you to feel happy and safe when visiting our website and to consider the implementation of data protection as a customer-oriented quality feature.
Please read this privacy policy carefully because it informs you of your rights and the manner and scope of the processing of personal data by our website, which has fully complied with the General Data Protection Regulation (GDPR 2016/679 – General Data Protection Regulation). For the text of the regulation you can click on the link https://eur-lex.europa.eu/legal-content/EL/TXT/?uri=CELEX:32016R0679.
The Regulation requires that any information to the data subject for the processing of the data be made in a concise, transparent, understandable and easily accessible form.
For that reason:
- Our website is about the sale of women's clothing. Transactions as well as browsing on our website are done with a secure server with Standard SSL encryption protocol with 256-bit encryption.
- Users of https:// www.detoiboutique.gr who are minors have access to its services exclusively with the consent of their parents and/or guardians. In the event that the aforementioned conditions are not met, the minors in question should refrain from any attempt to make use of the services, pages and its content in general. In the event that we detect use of the website and the online store by minors (e.g. ordering a product), the personal data of the minors will be deleted immediately and the transaction (e.g. sale) will be considered invalid.
- What is personal data and which of it do we collect?
"personal data" means any information concerning an identified or identifiable natural person ("data subject"). Anonymous information is not intended as such.
Our website collects personal data a) when you register on it, b) when you register on its contact form, c) when you register to receive our newsletter, d) when you use its online chat/message boards of our website, e) when you use/order our products, f) when you visit its pages and/or enter its promotional / advertising programs, h) when you participate in competitions. The personal information collected is the minimum required to complete the above actions, which are identity data, contact data with you and/or your financial data.
It is possible to collect and process the following types of personal data, such as information related to your computer, your visits to our website and your activity, for the purpose of correctly establishing the connection, comfortable use of our website and security of the system, (e.g. IP address, date and time of access, type and version of its browser, operating system, pages you preferred, etc.), information you provide when completing your profile on the website or to connected applications such as social media and any other personal information you choose to submit to our website. Of course, the use of these will only take place if the Law allows us to do so.
We do NOT collect special categories of your personal data, i.e. data “revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of unmistakable personal identification, data that concern health or data concerning a natural person's sexual life or sexual orientation" (Article 9 para. 1 GDPR/GDPR) or data concerning criminal convictions and offenses (Article 10 GDPR/GDPR). If you do not allow us to collect your personal data for the purposes listed here, we may not be able to provide you with our services optimally.
- How and why do we use your personal data?;
When their use is necessary for the general performance of a contract to which you are a party, i.e. when you make a purchase from our online or physical store (selling, invoicing, shipping products, handling complaints) and when their use is necessary for the compliance with our legal obligation, i.e. we archive these for accounting and tax reasons, in accordance with article 6 par. 1 b', c' and f GDPR/GDPR. We also use your personal data to manage our website, to provide third parties with statistical information about you, but without the recipients of this data being able to identify you, and to keep the website and connected applications safe and to avoid fraud.
- Advertising- marketing
As long as you have given us your express consent and depending on the personal data you have provided us with, we create your user profile, according to your personal interests and will send you advertising messages related to our activity (or to the activities of carefully selected third-party companies ) via e-mail, SMS, Viber, etc. The legal basis for this processing is article 6 par. 1 a' and f GDPR/GDPR. At any time you can stop receiving updates from us, either by using the corresponding deletion link at the end of the message, or by contacting 2461021135, or by sending an e-mail to [email protected]
- Newsletters
As long as you have given us your express consent and depending on the personal data you have provided us, we create your usage profile, according to your personal interests and we will send you newsletters by e-mail (newsletters) which will provide information about products, offers, competitions, etc. The legal basis for this processing is article 6 par. 1 a' GDPR/GDPR. At any time you can stop receiving updates from us, either by using the corresponding deletion link at the end of the newsletter, or by contacting 2461021135, or by sending an e-mail to [email protected]
- Participation in contests
You have the possibility through the website or through our social media page to participate in competitions. The personal data you provide us in the context of participating in a competition will be used exclusively for the processing of the competition (e.g. announcing winners, notifying winners, sending a gift) and will only process it for this purpose if you have given us the your consent, which you can at any time with effect for the future, either by contacting 2461029822, or by sending an e-mail to [email protected]
Transmission to third parties is only carried out if this is required for the processing of the competition (e.g. sending the gift via a partner transport company). Further transmission to third parties is generally excluded. After the end of the competition and the announcement of the winners, the winners' data is kept for the duration of legal warranty claims, to enable subsequent restoration or exchange in the event of a defect
- Use of cookies
Cookies are, in simple terms, small pieces of code that record your movements while navigating our website and can be distinguished into:
- Performance Cookies
We use these cookies to improve the functionality of the website by recording how visitors use it. In some cases these cookies allow us to process your requests more quickly and to remember your selected preferences. By removing the use of these cookies you may no longer receive personalized product recommendations and may experience delays in website performance. - Advertising & Social Media Cookies
With social networking cookies you can connect to your social networks and share content from our website there. Advertising cookies (third parties) collect information that helps to better personalize advertisements to meet your interests. In some cases, these cookies involve the processing of your personal data. For more information on the processing of personal data, see the Privacy and Cookies Policy. If you disable these cookies, you may see ads that are not relevant to your interests or you may not be able to connect to Facebook, Twitter or other social networks normally and share content. - Functional Cookies
These cookies are necessary for the basic functioning of the website and are therefore always enabled. These include the cookies that store your information while you are on our pages or, if you wish, during each visit. They enable the addition of products to the cart and the checkout process, while helping to solve security issues and comply with regulations.
By using our website, you must agree to what kind of cookies you allow us to place. By entering the main page of our website, you will be informed of a relevant note on the use of cookies and the possibilities of disabling them, or
- The transfer of your data to third parties is generally prohibited.
Exceptionally, the data is processed by processors on our behalf. They are carefully selected each time, checked by us and contractually bound according to Article 28 GDPR. In addition, we may be required to pass extracts of your request to our counterparties (e.g. suppliers, for product related requests) for the purpose of processing your request. These may be auditors and professional consultants (lawyers, accountants, bank) and/or companies related to the transfer of products, professional service providers such as marketing, advertising and web support, optimization and hosting companies, payment control services , Cybercrime Prosecution, Consumer Protection and e-fraud prevention services, for cases of malicious use, social media if you choose to link your account on them with our website. If the transmission of your personal data is required in an individual case, we will inform you about this in order to obtain your consent. We do NOT transfer your personal data to recipients outside the European Union.
- Security of your personal data
We have effectively implemented, both at the time of determining the means of processing and at the time of processing, appropriate technical and organizational measures, designed to implement data protection principles and to incorporate the necessary guarantees into the processing in such a way as to meet the requirements of the GDPR and to protect your rights. We have also implemented appropriate technical and organizational measures to ensure that, by default, only personal data that is necessary for the purpose of the processing is processed. We have active control procedures for a possible breach of personal data and in such a case we will immediately inform you as well as the competent supervisory authority.
- How long do we keep your personal data?
The computers and programs used by our company are designed in such a way as to minimize the use of personal and identifying information. This data is processed only to the extent necessary to achieve the purposes stated in this Policy and will be stored for as long as is absolutely necessary to achieve the specific intended purposes. In any case, the criterion used to determine the storage period is based on compliance with the deadlines permitted by law and the principles of data minimization, storage limitation or rational management of our records.
- Know your rights under the GDPR
If you are a resident of the European Union, you have the following rights in simple terms:
- The right to information about how we use your personal data.
- The right of access, i.e. you can request a copy of the personal data we hold about you.
- The right to rectification, i.e. to correct your personal data, which may be incomplete or inaccurate.
- The right to erasure (right to be “forgotten”), i.e. in specific cases to ask us to delete your personal data that we hold (unless there is a legal reason that prohibits us from doing so)
- The right to restrict the processing of your personal data.
- The right to portability of your data, i.e. to request a copy of your personal data in a common file format and to transfer said data to another company.
- The right to object to the processing of your personal data, e.g. for direct marketing purposes.
- The right not to subject the data subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.
- The right to complain to the competent data protection supervisory authority in the Member State in which you have your usual residence or your place of work.
The above rights are subject to specific regulations about when you can exercise them. You do not have to pay to access your personal data (or to exercise any of your rights), unless your request is unfounded, repetitive or excessive, in which case we may refuse to comply. Please note that we may ask for some additional information to confirm your identity when you request access to your rights or to exercise any of your other rights and this is as a security measure that your personal data will not be disclosed to others. We will respond to each of your requests within a period of one (1) month, if we need more time due to complexity or number of requests, we will inform you.
- Controller
Aspasia Proitsi Tou Charalambous is designated as the data controller, to whom you can contact for any question you may have regarding the privacy policy or for the exercise of any of your rights arising from the GDPR
