Privacy Policy & Terms of Use

Privacy Policy & Terms of Use

The protection of your personal data is important to us!

With its current policy, the Sole Proprietorship with the name "Perfume Shop" (hereinafter the "Company" or "we" or "us", which is based in Drama and is legally represented by Christina Efstratidou, (Tax Identification Number 139716961 May 109, PC 66133), determines and discloses the terms under which, acting as defined by law as "Processor", collects, stores, uses and processes your personal data, which it collects when you visit, register or use the Company website as well as when you trade with its physical stores.

This Privacy Policy further describes how you use, disclose and protect your personal data, the options you have regarding your personal data and how you can contact us. This Privacy Policy is in line with the terms and conditions of European Regulation 679/2016 (GDPR) as well as any other relevant applicable legislation.

For any question regarding this Privacy Policy, but also for any other issue related to the processing of your Data and the exercise of your rights, you can contact us via the email address info@toaromatopolion.gr

1. A few words about the Company's Website.

Our Company, in line with the modern needs of the customers but also for the best and most immediate service, proceeded to the creation of an online store through which the customers will be able to access the products that it provides through the website www.toaromatopolion.gr

2. What is Personal Data?

The term "personal data" refers to information of individuals, such as name, postal address, email address, contact telephone number, etc., which identify and personalize or can identify and personalize your identity.

3. What is the Processing of Personal Data?

Any operation or series of operations performed with or without the use of automated means, on personal data or personal data sets such as the collection, registration, organization, structure, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

4. Is it mandatory to provide your Personal Data?

The disclosure of your Data may be necessary to achieve the purposes set out in this Privacy Policy or may be optional.

The mandatory or optional nature of the data assignment is indicated by an asterisk (*) next to the personal data of a mandatory nature.

Failure to provide the required information on the Websites will make it impossible to achieve the primary purpose for which the specific Data is collected, and may, for example, make it impossible for the Company to fulfill the contract of sale or provide of the other services available on its Websites.

The provision of additional Data to the Company, in addition to those that are marked as mandatory, is optional and does not have consequences for the main purposes of Data collection, as their provision serves only to optimize the quality of the services provided by us.

5. What Personal Data do we collect?

We take care to collect only the absolutely necessary Personal Data, which are appropriate and clear for the intended purpose. This Data includes the following:

a. Data you provide to us when you register and create a user account on our website, via the internet or your mobile or through your personal contact with our stores or our sellers and specific data such as email * and password / login password (as required) and name, surname, postal address, telephone number (optional).

b. Data and information that you provide to us through our transactions (purchases, orders, etc.) and the communication between us (through physical stores, our online store, our sellers, telephone, e-mail or through any other way). For example, we collect notes from our conversations with you, details of any complaints or comments you make, details of purchases you made, products added to or removed from your cart, list of products you wish to purchase (wish list ), coupon redemptions, which of our websites you visit and how and when you contact us.

c. Data regarding the payment method for the transactions you make with us.

d. Data you provide to us when you subscribe to our newsletter.

e. Data on the products you usually prefer. In order to offer you products of your interest and to further improve your shopping experience with us. Of course, you always have the option not to share such information with us.

f. Traffic data of our website.

g. Information collected from the use of cookies in your browser.

h. The username of your social media, if you interact with us through these channels, to help us respond to your comments, questions or comments.

6. Use of Cookies

For the best service the company uses Cookies that aim to:

A) The creation and improvement of products
B) Measuring content performance
C) Measuring site performance
D) Carrying out research for the public
E) The selection of personalized content
F) The storage and access to the data of a device
G) The use of accurate geo-location data

7. How do we use your Personal Data?

a) To complete product orders: The Company processes your Data in order to fulfill its contractual relationship, to process product ordering, to provide customer service, to comply with legal obligations, to oppose, raise or enforce legal requirements.
In addition, we may retain your Data for a reasonable period of time in order to meet our contractual obligations, such as product returns, as required by law.

b) For the Creation of a User Account: The Company processes your Data in order to provide you with the account functions and to facilitate the conclusion of the purchase of products.

c) For Communication: The Company uses your Data to respond to requests / questions you submit, refund requests and / or any complaints. The information you share with us, enables us to manage your requests and respond to you in the best possible way. We may also maintain a record of your inquiries / requests to us in order to better respond to any future communication. We do this based on our contractual obligations to you, our legal obligations and our legitimate interests in order to provide you with the best possible service and to be able to improve our services based on your personal experience.

d) For Sending newsletter / offers: With your consent, we will use your Personal Data, preferences and transaction details to inform you via email, internet, phone and / or social media for related products and services, including personalized personalized offers, etc. Of course you have the option to revoke this consent at any time.

e) For Web push notifications: Depending on your navigation, you can receive, having previously given your consent, notifications about our offers, news, your wish list and your shopping cart. Of course you have the option to revoke this consent at any time.

f) For the Development and improvement of the products we provide to you. We do this based on our legitimate business interests.

g) Because we want to offer you offers and suggestions that are more relevant to your interests and needs.

h) To ensure that you will always receive the most interesting content on our website, we will use the Data you have provided to us by giving you your consent to receive notifications of your consent for the placement of cookies on your device. For example, we may display a list of recently viewed products or offer recommendations based on your shopping history and any other data you have shared with us.

i) To protect your account from fraud and other illegal activities: This includes the use of your Data to maintain, update and protect your account. We also monitor browsing activity with us to quickly identify and resolve any issues and protect the integrity of our website. All of the above are part of our legitimate interest. For example, we check your password when you log in and use automated IP address tracking to detect possible false logins from unexpected locations.

j) To process payments and prevent fraudulent transactions: We do this based on our legitimate business interests. This also helps protect our customers from fraud.

k) In order to comply with our contractual obligations to you or in application of provisions of law or in execution of court decisions.

l) To send you communications required by law or necessary to inform you of changes in the services we provide. For example, updates on these privacy notices, product recall notices, and legally required information about your orders. These service messages will not contain promotional content and do not require prior consent when sent by email or text message (SMS). If we do not use your personal data for these purposes, we will not be able to comply with our legal obligations.

Finally, we know that the processing of your Data is carried out either by the specially authorized personnel of the Company, or through computer systems and electronic devices by us and exceptionally by third parties, who, having contractually committed to the confidentiality and protection of the Data carry out tasks that are necessary for the achievement of the purposes strictly related to the use of our Websites, its services and the sale of products through our Websites. Information on this can be found below in terms 8 and 9 “Who are the recipients of your Data? How your Data is communicated ".

8. What is the legal basis for processing your data?

Legislation (Community and domestic) on data protection defines various reasons why a company may collect and process your personal data, including the terms of our contractual relationship with your consent, where required. For example, when you choose to receive a newsletter when collecting your personal data, we will always let you know what data is needed in relation to a particular service.

The legislation for our obligations (eg tax legislation, legislation for e-commerce, etc.) and for the legal interest of our Company. In certain cases, we collect your Data in a way that is reasonably expected as part of our operation and that does not substantially affect your rights, freedoms or interests.

9. Who are the recipients of your Data?

Access to your Data is the absolutely necessary staff of the Company, which is committed to confidentiality and third party service providers, who process your Data as performers of processing on our behalf and in accordance with our orders.

10. How is your Data communicated?

Disclosure of Data by us

We share your Data with:

Third party service providers that process personal data on our behalf for example (indicatively mentioned) for credit card and payment processing, transfers and deliveries, hosting, management and maintenance of our data, email distribution, research and analysis, promotion management, and management of certain services and data. When we use third party service providers we enter into agreements that oblige them to implement appropriate technical and organizational measures to protect your personal data.

Other third parties, to the extent required for the following purposes: (i) compliance at the request of a body of the Hellenic State, court decision or applicable law, (ii) prevention of illegal uses of our website or violations of our terms of use and policies , (iii) our protection against third party claims, and (iv) helping to prevent or investigate fraud (eg counterfeiting).

Other third parties to whom you yourself have given your consent.

Disclosure of Data by you

When you use certain social media items on our site, you can create a public profile that includes information such as username, profile picture and city. You can also share content with your friends or the general public, including information about how you interact with the Company. We encourage you to use the tools we provide to manage your company's social media sharing in order to control the information you make available through its social media components.

11. How long do we keep your Data?

We retain your Personal Data for as long as necessary to fulfill the purposes set forth in this Privacy Policy (unless a longer retention period is required by applicable law). Generally this means that we will retain your Personal Data for as long as you have an account with us. Regarding your Personal Data related to product purchases, we retain this data for a longer period of time in order to comply with our legal obligations (such as tax and commercial law and for warranty purposes). At the end of this retention period, your data will be deleted completely or anonymously, for example by aggregation with other data, so that it can be used in an unrecognizable way for statistical analysis and business planning.

Some examples of Customer Data Retention Periods:

Orders
When you place an order, we will retain the personal information you provided to us for five years so that we can comply with our legal and contractual obligations.

Newsletter
Your statement of consent for sending a newsletter (newsletter) is kept for as long as a newsletter is sent to you by the Company and in any case not more than six months from the cessation of sending it.

12. Is your Data secure?

We are committed to safeguarding your Personal Data.

Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to secure and protect your Data from any form of accidental or improper processing. We use the most modern and advanced methods, to ensure maximum safety.

The site uses the TLS 1.2 protocol for secure online trading. This encrypts all the Data you provide, including your credit card number, name and address, so that it cannot be decrypted or changed when it is transferred over the Internet.

Additionally, the details used to identify you as an account user are two: the Password and the Personal Security Password. Each time you enter your details, you are given access to your personal account. This process is achieved securely through encryption during their transfer to the Internet and the Company's servers. By the same token, you are allowed to change your Personal Security Password as often as you wish. After entering the desired password, the new password is encrypted and stored in our systems. For this reason, you are the only one who knows your password and you are solely responsible for maintaining the confidentiality of the password by third parties.

These measures shall be reviewed and amended as necessary.

13. What are your rights?

You have the right to access your Personal Data.

This means that you have the right to be informed by us if we process your Data. If we process your Data you can ask to be informed about the purpose of processing, the type of your Data we hold, to whom we give it, how long we store it, if automated decisions are made, but also about your other rights, such as correction, deletion of data, restriction of processing and submission of a complaint to the Personal Data Protection Authority.

You have the right to correct inaccurate personal data.

If you find that there is an error in your Data you can ask us to correct it (eg name correction or change of address notification).

You have the right to delete / forget.

You can ask us to delete your data if it is no longer necessary for the above mentioned processing purposes or you wish to revoke your or your case if this is the only legal basis.

You have the right to portability of your Data.

You can ask us to receive in readable form the Data you have provided or ask us to pass it on to another editor.

You have the right to restrict processing.

You can ask us to restrict the processing of your Data for as long as your processing objections are pending.

You have the right to object and withdraw your consent to the processing of your Data.

You may object to the processing of your Data and we will stop the processing of your Data unless there are other compelling and legitimate reasons prevailing over your right. If you have given your consent to the collection, processing and use of your personal data, you may revoke your consent at any time with future effect:
You can contact us using the contact details we give you in term 13 below.

In case we rely on our legitimate interest:

In cases where we process your personal data based on our legitimate interest, you can ask us to stop for reasons related to your personal situation. We must then do so if we do not believe we have a legitimate compelling reason to continue processing your Personal Data.

14. How can you exercise your Rights?

In order to exercise your rights you can submit a relevant request to us at the e-mail address… entitled "Exercise of the Right" and we will examine it and answer you as soon as possible.

Exceptionally:

If you wish to correct your Data in your user account, you can log in to it and make any correction / change without the need to submit a Request.

Identity check

To protect the confidentiality of your information, we will ask you to verify your identity before making any request under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to prove that they have your permission to act for this purpose.

15. When do we respond to your requests?

We respond to your requests free of charge without delay, and in any case within (1) one month from the time we receive your request. However, if your Request is complex or there is a large number of your Requests, we will inform you within the month if we need to receive an extension of another (2) two months within which we will respond to you.

16. What is the Applicable Law when processing your Data?

Applicable Law is the Greek Law, as formulated according to the General Regulation for the Protection of Personal Data 2016/679 / EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.

17. Where can you go if we violate the applicable law for the protection of your Personal Data?

You have the right to file a complaint to the Personal Data Protection Authority (postal address 1-3 Kifissias, PC 115 23, Athens, tel. 210. 6475600, e-mail address (email) contact@dpa.gr), if you consider that the processing of your Personal Data violates the applicable national and regulatory framework law for the protection of personal data.

18. How will you be notified of any changes to this Policy?

We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post this update on our website before the changes take effect and we will notify you in any appropriate way.

We encourage you to read this Policy from time to time to know how your Data is protected.

This privacy policy was last updated on 11-12-2020